Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-33810 (GCVE-0-2026-33810)
Vulnerability from cvelistv5 – Published: 2026-04-08 01:06 – Updated: 2026-08-28 12:04
VLAI
EPSS
VEX
Title
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
Summary
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
Severity
7.5 (High)
8.8 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-13 17:48 UTC
CWE
Assigner
References
67 references
Impacted products
116 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | crypto/x509 |
Affected:
1.26.0-0 , < 1.26.2
(semver)
|
guessed | |
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.1.1-7 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
||
| Red Hat | HawtIO HawtIO 4.4.0 |
Unaffected:
operator-container , < *
(rpm)
cpe:/a:redhat:apache_camel_hawtio:4.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.144.0-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.144.0-2.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.5-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:5.3.0-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:2.21.0-2.el10_0.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
8060020260803064027.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
||
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
8060020260803064027.ad008a3a , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.6 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.144.0-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.33.15-1.el9_4.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
4:4.9.4-20.el9_4.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.14.6-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.26.5-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:5.1.1-15.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:3.3.23-22.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat OpenStack Platform 17.1 for RHEL 9 |
Unaffected:
0:3.4.26-9.5.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:17.1::el9 |
||
| Red Hat | Red Hat OpenStack Services on OpenShift 18.0 |
Unaffected:
0:0.1.1-18.0.20260602234716.a95ae05.el9ost , < *
(rpm)
cpe:/a:redhat:openstack:18.0::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.3-5.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Compliance Operator 1 |
Unaffected:
1781605005 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1781192891 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.2 |
Unaffected:
1784747813 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1780051640 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Multicluster Global Hub 1.5.6 |
Unaffected:
1779828691 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785180878 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.4 |
Unaffected:
1779809598 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1779808027 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1777391542 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502438 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784194574 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784127736 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.2-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1.0.3-1779996197 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783914276 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat multicluster global hub 1.4.2 |
Unaffected:
1779838819 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Red Hat multicluster global hub 1.6.0 |
Unaffected:
1780320809 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.6.4 |
Unaffected:
1776847666 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.6::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1776846936 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.28 |
Unaffected:
1779829736 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.28::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.9.3 |
Unaffected:
1776435680 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780399582 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1780423339 , < *
(rpm)
Unaffected: 1784296203 , < * (rpm) cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1780425077 , < *
(rpm)
Unaffected: 1784247610 , < * (rpm) cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1780425080 , < *
(rpm)
Unaffected: 1784296127 , < * (rpm) cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1780424928 , < *
(rpm)
Unaffected: 1784296114 , < * (rpm) cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1780424829 , < *
(rpm)
Unaffected: 1784296033 , < * (rpm) cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8
|
||
| Red Hat | mirror registry for Red Hat OpenShift |
cpe:/a:redhat:mirror_registry:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4
|
||
| Red Hat | Red Hat AI Inference Server |
cpe:/a:redhat:ai_inference_server:3
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Developer Hub |
cpe:/a:redhat:rhdh:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | streams for Apache Kafka 3 |
cpe:/a:redhat:amq_streams:3
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-33810",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-13T17:48:57.879958Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-13T18:20:37.411Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-04-20T17:23:21.823Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/04/19/4"
},
{
"url": "http://www.openwall.com/lists/oss-security/2026/04/20/1"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.1.1-7",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4.4::el9"
],
"defaultStatus": "affected",
"packageName": "hawtio",
"product": "HawtIO HawtIO 4.4.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "operator-container",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.3.0-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.21.0-2.el10_0.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260803064027.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.6"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8060020260803064027.ad008a3a",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.33.15-1.el9_4.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:4.9.4-20.el9_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.14.6-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.1.1-15.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.3.23-22.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1::el9"
],
"defaultStatus": "affected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.4.26-9.5.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Services on OpenShift 18.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.1-18.0.20260602234716.a95ae05.el9ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.3-5.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781605005",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781192891",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784747813",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780051640",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.5.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779828691",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785180878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779809598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779808027",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777391542",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502438",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784194574",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784127736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.2-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.0.3-1779996197",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783914276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779838819",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Red Hat multicluster global hub 1.6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780320809",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776847666",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776846936",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.28::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.28",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779829736",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/client-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780399582",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780423339",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780425077",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780425080",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780424928",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780424829",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "edo/external-dns-rhel8",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "edo/external-dns-rhel9",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "affected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-cli-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:1"
],
"defaultStatus": "affected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-rhel8",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "unaffected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-cni-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-rhel8-operator",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/openshift-golang-builder",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/pilot-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/proxyv2-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/ratelimit-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/openshift-golang-builder",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/3scale-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp26/operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "unaffected",
"packageName": "rhaiis/vllm-cpu-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "unaffected",
"packageName": "rhaiis/vllm-neuron-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "unaffected",
"packageName": "rhaiis/vllm-tpu-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "unaffected",
"packageName": "rhaii/vllm-neuron-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/coredns-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhdh:1"
],
"defaultStatus": "unaffected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/conmon",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/containernetworking-plugins",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/runc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/skopeo",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8/toolbox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8/golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "unaffected",
"packageName": "rhelai3/bootc-aws-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "unaffected",
"packageName": "rhelai3/bootc-azure-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "unaffected",
"packageName": "rhelai3/bootc-azure-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "unaffected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "unaffected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "unaffected",
"packageName": "rhelai3/bootc-gcp-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "unaffected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhai/base-image-neuron-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-codeflare-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-feast-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kf-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-agent-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-router-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kuberay-operator-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kueue-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llama-stack-core-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llama-stack-k8s-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-batch-gateway-apiserver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-batch-gateway-gc-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-batch-gateway-processor-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-maas-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-runtime-generic-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mm-rest-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-registry-job-async-upload-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-serving-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-must-gather-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-notebook-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhaii-cluster-validator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-spark-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ta-lmes-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-ta-lmes-job-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-training-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/openshift-golang-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-sdn-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-kuryr",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "cnv4/openshift-golang-builder",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/virt-api",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-api-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-builder-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "unaffected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-danielqsj-kafka_exporter",
"product": "streams for Apache Kafka 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-08T01:06:56.546Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1289",
"description": "Improper Validation of Unsafe Equivalence in Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-28T12:04:17.962Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"name": "RHBZ#2456335",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14391"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39810"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34365"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19144"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57126"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34192"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34196"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56223"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26571"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25089"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22862"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22485"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10158"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21772"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24478"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22960"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22958"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22962"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22959"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22961"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:14391: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:28047: Red Hat OpenStack Platform 17.1"
},
{
"lang": "en",
"value": "RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0"
},
{
"lang": "en",
"value": "RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:56143: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19714: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:57126: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:51288: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:56223: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26571: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:25089: HawtIO HawtIO 4.4.0"
},
{
"lang": "en",
"value": "RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Multicluster Global Hub 1.5.6"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:7291: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:10155: Red Hat OpenShift Builds 1.6.4"
},
{
"lang": "en",
"value": "RHSA-2026:10158: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3"
},
{
"lang": "en",
"value": "RHSA-2026:24478: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:22960: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:22958: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:22962: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:22959: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:22961: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Red Hat multicluster global hub 1.4.2"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Red Hat multicluster global hub 1.6.0"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-08T02:01:09.100Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-08T01:06:56.546Z",
"value": "Made public."
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "newDNSConstraints"
},
{
"name": "dnsConstraints.query"
},
{
"name": "Certificate.Verify"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.26.2",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Riyas from Saintgits College of Engineering"
},
{
"lang": "en",
"value": "k1rnt"
},
{
"lang": "en",
"value": "@1seal"
}
],
"descriptions": [
{
"lang": "en",
"value": "When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-295: Improper Certificate Validation",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-08T01:06:56.546Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/763763"
},
{
"url": "https://go.dev/issue/78332"
},
{
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-33810",
"datePublished": "2026-04-08T01:06:56.546Z",
"dateReserved": "2026-03-23T20:35:32.814Z",
"dateUpdated": "2026-08-28T12:04:17.962Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-33810",
"date": "2026-08-28",
"epss": "0.0034",
"percentile": "0.26609"
},
"microsoft_vex": {
"current_release_date": "2026-04-14T14:47:37.000Z",
"cve": "CVE-2026-33810",
"id": "msrc_CVE-2026-33810",
"initial_release_date": "2026-04-02T00:00:00.000Z",
"product_status:fixed": "2",
"product_status:known_affected": "2",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-33810.json",
"version": "2"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-33810\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-04-08T02:16:03.950\",\"lastModified\":\"2026-08-28T16:17:35.233\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.\"},{\"lang\":\"es\",\"value\":\"Al verificar una cadena de certificados que contiene restricciones DNS excluidas, estas restricciones no se aplican correctamente a los SAN DNS comod\u00edn que utilizan may\u00fasculas/min\u00fasculas diferentes a las de la restricci\u00f3n. Esto solo afecta la validaci\u00f3n de cadenas de certificados que de otro modo ser\u00edan de confianza, emitidas por una CA ra\u00edz en el CertPool VerifyOptions.Roots o en el grupo de certificados del sistema.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"crypto/x509\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"crypto/x509\",\"programRoutines\":[{\"name\":\"newDNSConstraints\"},{\"name\":\"dnsConstraints.query\"},{\"name\":\"Certificate.Verify\"}],\"versions\":[{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.2\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.1.1-7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"HawtIO HawtIO 4.4.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"hawtio\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4.4::el9\"],\"versions\":[{\"version\":\"operator-container\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.5-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:5.3.0-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:2.21.0-2.el10_0.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"8060020260803064027.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.6\"],\"versions\":[{\"version\":\"8060020260803064027.ad008a3a\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.33.15-1.el9_4.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"4:4.9.4-20.el9_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.14.6-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:5.1.1-15.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:3.3.23-22.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1::el9\"],\"versions\":[{\"version\":\"0:3.4.26-9.5.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Services on OpenShift 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0::el9\"],\"versions\":[{\"version\":\"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.3-5.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1781605005\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1781192891\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784747813\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1780051640\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1779828691\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785180878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"],\"versions\":[{\"version\":\"1779809598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1779808027\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1777391542\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502438\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784194574\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784127736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.2-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1.0.3-1779996197\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783914276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1779838819\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat multicluster global hub 1.6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1780320809\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.6::el9\"],\"versions\":[{\"version\":\"1776847666\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1776846936\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.28\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.28::el9\"],\"versions\":[{\"version\":\"1779829736\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/client-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780399582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1780423339\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1780425077\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1780425080\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1780424928\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1780424829\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel8\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-agent-base-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel8\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/pilot-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/ratelimit-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/3scale-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp26/operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaiis/vllm-cpu-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaiis/vllm-neuron-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaiis/vllm-tpu-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaii/vllm-neuron-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/coredns-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8/golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-aws-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-azure-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-azure-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gcp-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/base-image-neuron-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ai-gateway-payload-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-codeflare-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-feast-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kf-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-llmisvc-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-router-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kuberay-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kueue-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-k8s-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-gc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-batch-gateway-processor-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-runtime-generic-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mm-rest-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-runtime-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-serving-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-job-async-upload-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-serving-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-notebook-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhaii-cluster-validator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-spark-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ta-lmes-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ta-lmes-job-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-th06-cpu-torch210-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-th06-cpu-torch291-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-th06-cuda130-torch210-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-th06-cuda130-torch291-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-th06-rocm64-torch291-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-training-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-trustyai-service-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workload-variant-autoscaler-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kuryr\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cnv4/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-danielqsj-kafka_exporter\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":4.2},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":5.3}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-13T17:48:57.879958Z\",\"id\":\"CVE-2026-33810\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1289\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.26.0\",\"versionEndExcluding\":\"1.26.2\",\"matchCriteriaId\":\"39FE9BAF-55E9-43AA-B14E-239E7EF1D65D\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/763763\",\"source\":\"security@golang.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://go.dev/issue/78332\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\",\"Release Notes\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4866\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/04/19/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/04/20/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10158\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14391\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19144\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19353\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19721\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21772\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22485\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22862\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22958\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22959\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22960\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22961\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22962\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24478\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25089\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26571\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34192\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34196\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34365\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51288\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56143\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56223\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57126\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57649\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7291\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-33810\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2456335\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-28T08:07:50+00:00",
"cve": "CVE-2026-33810",
"id": "CVE-2026-33810",
"initial_release_date": "2026-04-08T01:06:56.546000+00:00",
"product_status:fixed": "557",
"product_status:known_affected": "220",
"product_status:known_not_affected": "1192",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/04/19/4\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2026/04/20/1\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-04-20T17:23:21.823Z\"}}, {\"title\": \"crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.1.1-7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"HawtIO HawtIO 4.4.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"operator-container\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"hawtio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.21.0-2.el10_0.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8060020260803064027.ad008a3a\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8060020260803064027.ad008a3a\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.33.15-1.el9_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:4.9.4-20.el9_4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.14.6-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.3.23-22.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.4.26-9.5.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Services on OpenShift 18.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.1-18.0.20260602234716.a95ae05.el9ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.3-5.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781605005\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781192891\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784747813\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780051640\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779828691\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785180878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779809598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779808027\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777391542\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502438\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784194574\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784127736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.2-1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.0.3-1779996197\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783914276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779838819\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat multicluster global hub 1.6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780320809\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776847666\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776846936\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.28::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.28\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779829736\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780399582\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/client-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780423339\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780425077\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780425080\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780424928\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780424829\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"workload-availability/fence-agents-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"workload-availability/machine-deletion-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:1\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-agent-base-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-cni-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/pilot-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/ratelimit-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/3scale-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp26/operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaiis/vllm-cpu-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaiis/vllm-neuron-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaiis/vllm-tpu-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaii/vllm-neuron-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/coredns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub\", \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"go-toolset:rhel8/golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-aws-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-azure-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-azure-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gcp-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhai/base-image-neuron-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ai-gateway-payload-processing-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-codeflare-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-feast-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kf-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-llmisvc-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-router-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kuberay-operator-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kueue-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-k8s-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-gc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-batch-gateway-processor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-runtime-generic-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mm-rest-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-runtime-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-serving-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-job-async-upload-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-serving-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-notebook-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhaii-cluster-validator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-spark-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ta-lmes-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ta-lmes-job-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-th06-cpu-torch210-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-th06-cpu-torch291-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-th06-cuda130-torch210-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-th06-cuda130-torch291-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-th06-rocm64-torch291-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-training-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workload-variant-autoscaler-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-tools\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kuryr\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"cnv4/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 3\", \"packageName\": \"golang-github-danielqsj-kafka_exporter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-08T02:01:09.100Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-08T01:06:56.546Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14391: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28047: Red Hat OpenStack Platform 17.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39810: 9Base-RHOSO-TOOLS-18, Red Hat OpenStack Services on OpenShift 18.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34365: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59546: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19714: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19144: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57126: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51288: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26571: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25089: HawtIO HawtIO 4.4.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22862: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26585: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21769: Multicluster Global Hub 1.5.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29854: OpenShift API for Data Protection 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26568: OpenShift API for Data Protection 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7291: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22485: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10155: Red Hat OpenShift Builds 1.6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10158: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21772: Red Hat OpenShift Dev Spaces 3.28\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24478: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22960: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22958: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22962: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22959: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22961: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22347: Red Hat multicluster global hub 1.4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23345: Red Hat multicluster global hub 1.6.0\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-04-08T01:06:56.546Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-33810\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2456335\", \"name\": \"RHBZ#2456335\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33810.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14391\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39810\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34365\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59546\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19719\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19714\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19144\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57126\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51288\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34192\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34196\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19721\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19353\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26571\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25089\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22862\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21769\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29854\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13545\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7291\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22485\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10155\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10158\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21772\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24478\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22960\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22958\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22962\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22959\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22961\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22347\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23345\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1289\", \"description\": \"Improper Validation of Unsafe Equivalence in Input\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-26T12:04:57.197Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-33810\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-13T17:48:57.879958Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-13T17:48:52.707Z\"}}], \"cna\": {\"title\": \"Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509\", \"credits\": [{\"lang\": \"en\", \"value\": \"Riyas from Saintgits College of Engineering\"}, {\"lang\": \"en\", \"value\": \"k1rnt\"}, {\"lang\": \"en\", \"value\": \"@1seal\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"crypto/x509\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.2\", \"versionType\": \"semver\"}], \"packageName\": \"crypto/x509\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"newDNSConstraints\"}, {\"name\": \"dnsConstraints.query\"}, {\"name\": \"Certificate.Verify\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/763763\"}, {\"url\": \"https://go.dev/issue/78332\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4866\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-295: Improper Certificate Validation\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-04-08T01:06:56.546Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-33810\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-26T12:04:57.197Z\", \"dateReserved\": \"2026-03-23T20:35:32.814Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-04-08T01:06:56.546Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:49712
Vulnerability from csaf_redhat - Published: 2026-08-03 17:42 - Updated: 2026-08-29 05:18Summary
Red Hat Security Advisory: golang security update
Severity
Important
Notes
Topic: An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The golang packages provide the Go programming language compiler.
Security Fix(es):
* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)
* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)
* cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)
* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)
* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)
* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)
* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)
* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.
5.9 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the 'go bug' command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.
4.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.
7.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.
6.5 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
136 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)\n\n* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)\n\n* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)\n\n* cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)\n\n* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)\n\n* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)\n\n* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)\n\n* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)\n\n* golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* os: golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49712",
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49712.json"
}
],
"title": "Red Hat Security Advisory: golang security update",
"tracking": {
"current_release_date": "2026-08-29T05:18:44+00:00",
"generator": {
"date": "2026-08-29T05:18:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49712",
"initial_release_date": "2026-08-03T17:42:42+00:00",
"revision_history": [
{
"date": "2026-08-03T17:42:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-03T17:42:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T05:18:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"product_id": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "golang-0:1.26.5-1.el9_6.aarch64",
"product_id": "golang-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"product_id": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.aarch64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.aarch64",
"product_id": "golang-race-0:1.26.5-1.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"product_id": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "golang-0:1.26.5-1.el9_6.ppc64le",
"product_id": "golang-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"product_id": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"product_id": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"product_id": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "golang-0:1.26.5-1.el9_6.x86_64",
"product_id": "golang-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"product_id": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.x86_64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.x86_64",
"product_id": "golang-race-0:1.26.5-1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_6.s390x",
"product_id": "go-toolset-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "golang-0:1.26.5-1.el9_6.s390x",
"product_id": "golang-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_6.s390x",
"product_id": "golang-bin-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_6.s390x",
"product": {
"name": "golang-race-0:1.26.5-1.el9_6.s390x",
"product_id": "golang-race-0:1.26.5-1.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_6.src",
"product": {
"name": "golang-0:1.26.5-1.el9_6.src",
"product_id": "golang-0:1.26.5-1.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-docs-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-docs-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-docs-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-docs@1.26.5-1.el9_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-misc-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-misc-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-misc-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-misc@1.26.5-1.el9_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-src-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-src-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-src-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-src@1.26.5-1.el9_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-tests-0:1.26.5-1.el9_6.noarch",
"product": {
"name": "golang-tests-0:1.26.5-1.el9_6.noarch",
"product_id": "golang-tests-0:1.26.5-1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-tests@1.26.5-1.el9_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "golang-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "golang-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "golang-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src"
},
"product_reference": "golang-0:1.26.5-1.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "golang-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-docs-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-docs-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-misc-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-misc-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-src-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-src-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-tests-0:1.26.5-1.el9_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
},
"product_reference": "golang-tests-0:1.26.5-1.el9_6.noarch",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39817",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-07T20:01:43.510043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \"go tool pack\" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the \"pack\" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "RHBZ#2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://go.dev/cl/767520",
"url": "https://go.dev/cl/767520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78778",
"url": "https://go.dev/issue/78778"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4979",
"url": "https://pkg.go.dev/vuln/GO-2026-4979"
}
],
"release_date": "2026-05-07T19:41:18.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction"
},
{
"cve": "CVE-2026-39819",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-05-07T20:01:04.403877+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \u0027go bug\u0027 command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system\u0027s temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the \u0027go bug\u0027 command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39819"
},
{
"category": "external",
"summary": "RHBZ#2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"category": "external",
"summary": "https://go.dev/cl/763882",
"url": "https://go.dev/cl/763882"
},
{
"category": "external",
"summary": "https://go.dev/issue/78584",
"url": "https://go.dev/issue/78584"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4978",
"url": "https://pkg.go.dev/vuln/GO-2026-4978"
}
],
"release_date": "2026-05-07T19:41:18.849000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-08T17:01:53.592869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39822"
},
{
"category": "external",
"summary": "RHBZ#2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
},
{
"category": "external",
"summary": "https://go.dev/cl/797880",
"url": "https://go.dev/cl/797880"
},
{
"category": "external",
"summary": "https://go.dev/issue/79005",
"url": "https://go.dev/issue/79005"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
"url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4970",
"url": "https://pkg.go.dev/vuln/GO-2026-4970"
}
],
"release_date": "2026-07-08T15:46:27.199000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-39825",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-05-07T20:01:37.714133+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s net/http/httputil package where ReverseProxy can forward query parameters that are hidden from Rewrite or Director functions. This occurs when the number of query parameters exceeds the url.ParseQuery limit (controlled by the GODEBUG setting urlmaxqueryparams). While Red Hat ships Go-based components across many products, exploitation requires that an application use ReverseProxy with a Rewrite or Director function that relies on query parameter inspection for security enforcement, which limits the practical impact of this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "RHBZ#2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://go.dev/cl/770541",
"url": "https://go.dev/cl/770541"
},
{
"category": "external",
"summary": "https://go.dev/issue/78948",
"url": "https://go.dev/issue/78948"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4976",
"url": "https://pkg.go.dev/vuln/GO-2026-4976"
}
],
"release_date": "2026-05-07T19:41:18.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Increase the maximum number of query parameters allowed by setting the GODEBUG environment variable `urlmaxqueryparams` to a higher value (e.g., `GODEBUG=urlmaxqueryparams=20000`), or validate and enforce security controls on query parameters at the backend service rather than relying solely on the ReverseProxy\u0027s Rewrite or Director function for security filtering.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
},
{
"cve": "CVE-2026-39826",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-07T20:01:46.305827+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only \u0027type\u0027 attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "RHBZ#2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://go.dev/cl/771180",
"url": "https://go.dev/cl/771180"
},
{
"category": "external",
"summary": "https://go.dev/issue/78981",
"url": "https://go.dev/issue/78981"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4980",
"url": "https://pkg.go.dev/vuln/GO-2026-4980"
}
],
"release_date": "2026-05-07T19:41:19.138000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42501",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-07T20:00:54.811489+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in the Go command (`cmd/go`) allows a malicious module proxy to bypass checksum validation, potentially leading to the execution of untrusted Go toolchains. Red Hat products utilizing the Go command are vulnerable if configured to use an untrusted module proxy or checksum database, as this could compromise the integrity of the Go development environment. Exploitation requires user interaction with a compromised proxy.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42501"
},
{
"category": "external",
"summary": "RHBZ#2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42501"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
},
{
"category": "external",
"summary": "https://go.dev/cl/775321",
"url": "https://go.dev/cl/775321"
},
{
"category": "external",
"summary": "https://go.dev/issue/79070",
"url": "https://go.dev/issue/79070"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4984",
"url": "https://pkg.go.dev/vuln/GO-2026-4984"
}
],
"release_date": "2026-05-07T19:41:19.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "To verify the integrity of Go module dependencies and detect potential tampering by a malicious proxy, users can revalidate all dependencies of the current module. This process involves removing the existing `go.sum` file and then re-generating and verifying module checksums.\n\nExecute the following commands in your module\u0027s root directory:\n```bash\nrm go.sum\ngo mod tidy\ngo mod verify\n```\nThis operation will re-download and re-verify all module dependencies. Be aware that this may affect your local module cache and could require re-building projects.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T17:42:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:go-toolset-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.src",
"AppStream-9.6.0.Z.EUS:golang-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-bin-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-docs-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-misc-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:golang-race-0:1.26.5-1.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:golang-src-0:1.26.5-1.el9_6.noarch",
"AppStream-9.6.0.Z.EUS:golang-tests-0:1.26.5-1.el9_6.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
}
]
}
RHSA-2026:51033
Vulnerability from csaf_redhat - Published: 2026-08-06 07:31 - Updated: 2026-08-29 08:37Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A local privilege escalation vulnerability has been discovered in containerd. This vulnerability is the result of an overly broad default permission which allows local users on the host to potentially access the metadata store, the content store and the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
References
257 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:51033",
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-25621",
"url": "https://access.redhat.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51033.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-08-29T08:37:59+00:00",
"generator": {
"date": "2026-08-29T08:37:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:51033",
"initial_release_date": "2026-08-06T07:31:01+00:00",
"revision_history": [
{
"date": "2026-08-06T07:31:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T08:37:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.3",
"product": {
"name": "OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3Abf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1785427055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Ab26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3Ae23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Afd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Abe6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Acc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ab38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Afa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Acf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Aeea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ac2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Ac612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Abd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Aaebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25621",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"discovery_date": "2025-11-06T19:01:04.402278+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2413190"
}
],
"notes": [
{
"category": "description",
"text": "A local privilege escalation vulnerability has been discovered in containerd. This vulnerability is the result of an overly broad default permission which allows local users on the host to potentially access the metadata store, the content store and the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd local privilege escalation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "RHBZ#2413190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2413190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25621",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25621"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/blob/main/docs/rootless.md",
"url": "https://github.com/containerd/containerd/blob/main/docs/rootless.md"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5",
"url": "https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w"
}
],
"release_date": "2025-11-06T18:36:21.566000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "The system administrator on the host can manually chmod the directories to not\nhave group or world accessible permissions:\n```\nchmod 700 /var/lib/containerd\nchmod 700 /run/containerd/io.containerd.grpc.v1.cri\nchmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim\n```\nAn alternative mitigation would be to run containerd in rootless mode.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd local privilege escalation"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42306",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-12T19:01:10.843543+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "RHBZ#2488484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
"url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
}
],
"release_date": "2026-06-12T18:09:22.188000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
}
]
}
RHSA-2026:51288
Vulnerability from csaf_redhat - Published: 2026-08-06 20:33 - Updated: 2026-08-29 08:38Summary
Red Hat Security Advisory: container-tools:rhel8 security update
Severity
Important
Notes
Topic: An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.
Security Fix(es):
* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)
* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)
* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
88 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSecurity Fix(es):\n\n* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n\n* golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip (CVE-2025-61728)\n\n* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\n* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n\n* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\n* golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey (CVE-2026-42508)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:51288",
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51288.json"
}
],
"title": "Red Hat Security Advisory: container-tools:rhel8 security update",
"tracking": {
"current_release_date": "2026-08-29T08:38:03+00:00",
"generator": {
"date": "2026-08-29T08:38:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:51288",
"initial_release_date": "2026-08-06T20:33:18+00:00",
"revision_history": [
{
"date": "2026-08-06T20:33:18+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-06T20:33:18+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T08:38:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_aus:8.6::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/aardvark-dns@1.0.1-40.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product": {
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8)",
"product_id": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.26.11-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.3?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product": {
"name": "buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8)",
"product_id": "buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.26.11-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.3?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product": {
"name": "buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8)",
"product_id": "buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.26.11-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.3?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product": {
"name": "buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8)",
"product_id": "buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.26.11-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.3?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product": {
"name": "buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8)",
"product_id": "buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.26.11-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.3?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon@2.1.4-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debuginfo@2.1.4-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon-debugsource@2.1.4-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product": {
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8)",
"product_id": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins@1.1.1-5.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product": {
"name": "containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8)",
"product_id": "containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debuginfo@1.1.1-5.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product": {
"name": "containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8)",
"product_id": "containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins-debugsource@1.1.1-5.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1-40.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crit@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/criu@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/criu-debuginfo@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/criu-debugsource@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/criu-devel@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/criu-libs@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/criu-libs-debuginfo@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun@1.14.3-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debuginfo@1.14.3-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun-debugsource@1.14.3-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs@1.9-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debuginfo@1.9-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs-debugsource@1.9-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libslirp@4.4.0-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libslirp-debuginfo@4.4.0-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libslirp-debugsource@4.4.0-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libslirp-devel@4.4.0-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/netavark@1.0.1-40.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8)",
"product_id": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook@1.2.6-1.module%2Bel8.6.0%2B24215%2Bd8cb7679.1?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"product": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8)",
"product_id": "oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debuginfo@1.2.6-1.module%2Bel8.6.0%2B24215%2Bd8cb7679.1?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"product": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8)",
"product_id": "oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook-debugsource@1.2.6-1.module%2Bel8.6.0%2B24215%2Bd8cb7679.1?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-catatonit@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-catatonit-debuginfo@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debuginfo@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-debugsource@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-gvproxy@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-gvproxy-debuginfo@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-plugins@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-plugins-debuginfo@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-remote-debuginfo@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product": {
"name": "podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8)",
"product_id": "podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-tests@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-criu@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"product": {
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8)",
"product_id": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.2.9-1.module%2Bel8.6.0%2B24505%2B50d764bf.2?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"product": {
"name": "runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8)",
"product_id": "runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debuginfo@1.2.9-1.module%2Bel8.6.0%2B24505%2B50d764bf.2?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"product": {
"name": "runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8)",
"product_id": "runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc-debugsource@1.2.9-1.module%2Bel8.6.0%2B24505%2B50d764bf.2?arch=x86_64\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product": {
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8)",
"product_id": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.9.5-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product": {
"name": "skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8)",
"product_id": "skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.9.5-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product": {
"name": "skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8)",
"product_id": "skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.9.5-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product": {
"name": "skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8)",
"product_id": "skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.9.5-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=x86_64\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/slirp4netns@1.2.0-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/slirp4netns-debuginfo@1.2.0-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/slirp4netns-debugsource@1.2.0-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/toolbox@0.0.99.3-0.7.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/toolbox-debuginfo@0.0.99.3-0.7.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/toolbox-debugsource@0.0.99.3-0.7.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product": {
"name": "toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8)",
"product_id": "toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/toolbox-tests@0.0.99.3-0.7.module%2Bel8.6.0%2B24209%2B25a14987?arch=x86_64\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"product": {
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src (container-tools:rhel8)",
"product_id": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.26.11-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.3?arch=src\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-podman@49.1-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/conmon@2.1.4-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/container-selinux@2.189.0-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"product": {
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src (container-tools:rhel8)",
"product_id": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containernetworking-plugins@1.1.1-5.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=src\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/containers-common@1-40.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/criu@3.15-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/crun@1.14.3-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fuse-overlayfs@1.9-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libslirp@4.4.0-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"product": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src (container-tools:rhel8)",
"product_id": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/oci-seccomp-bpf-hook@1.2.6-1.module%2Bel8.6.0%2B24215%2Bd8cb7679.1?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"product": {
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src (container-tools:rhel8)",
"product_id": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=src\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-podman@4.0.1-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"product": {
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src (container-tools:rhel8)",
"product_id": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/runc@1.2.9-1.module%2Bel8.6.0%2B24505%2B50d764bf.2?arch=src\u0026epoch=1\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"product": {
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src (container-tools:rhel8)",
"product_id": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.9.5-1.module%2Bel8.6.0%2B24590%2Bdb5ff31b.2?arch=src\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/slirp4netns@1.2.0-3.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/toolbox@0.0.99.3-0.7.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product": {
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src (container-tools:rhel8)",
"product_id": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/udica@0.2.6-5.module%2Bel8.6.0%2B24209%2B25a14987?arch=src\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product": {
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8)",
"product_id": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cockpit-podman@49.1-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=noarch\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product": {
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8)",
"product_id": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/container-selinux@2.189.0-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=noarch\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"product": {
"name": "podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch (container-tools:rhel8)",
"product_id": "podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/podman-docker@4.2.0-8.module%2Bel8.6.0%2B24590%2Bdb5ff31b.6?arch=noarch\u0026epoch=2\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product": {
"name": "python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8)",
"product_id": "python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-podman@4.0.1-1.module%2Bel8.6.0%2B24209%2B25a14987?arch=noarch\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
},
{
"category": "product_version",
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product": {
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8)",
"product_id": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/udica@0.2.6-5.module%2Bel8.6.0%2B24209%2B25a14987?arch=noarch\u0026rpmmod=container-tools:rhel8:8060020260803064027:ad008a3a"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8"
},
"product_reference": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8"
},
"product_reference": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8"
},
"product_reference": "podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8"
},
"product_reference": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8"
},
"product_reference": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8"
},
"product_reference": "runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8"
},
"product_reference": "runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8"
},
"product_reference": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)",
"product_id": "AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8"
},
"product_reference": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8"
},
"product_reference": "buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8"
},
"product_reference": "oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8"
},
"product_reference": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8"
},
"product_reference": "podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8"
},
"product_reference": "podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8"
},
"product_reference": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8"
},
"product_reference": "runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8"
},
"product_reference": "runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8"
},
"product_reference": "runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8"
},
"product_reference": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8"
},
"product_reference": "skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8"
},
"product_reference": "toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8"
},
"product_reference": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)",
"product_id": "AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
},
"product_reference": "udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"relates_to_product_reference": "AppStream-8.6.0.Z.EUS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T20:33:18+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51288"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.6.0.Z.AUS:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.AUS:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-debugsource-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:buildah-tests-debuginfo-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:cockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debuginfo-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:conmon-debugsource-2:2.1.4-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:container-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:containers-common-2:1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crit-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-debugsource-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-devel-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:criu-libs-debuginfo-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debuginfo-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:crun-debugsource-0:1.14.3-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debuginfo-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:fuse-overlayfs-debugsource-0:1.9-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debuginfo-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-debugsource-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:libslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:netavark-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debuginfo-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:oci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-catatonit-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-debugsource-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-docker-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-gvproxy-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-plugins-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-remote-debuginfo-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:podman-tests-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-criu-0:3.15-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:python3-podman-0:4.0.1-1.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debuginfo-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:runc-debugsource-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debuginfo-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-debugsource-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:skopeo-tests-2:1.9.5-1.module+el8.6.0+24590+db5ff31b.2.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debuginfo-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:slirp4netns-debugsource-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.src::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debuginfo-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-debugsource-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:toolbox-tests-0:0.0.99.3-0.7.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch::container-tools:rhel8",
"AppStream-8.6.0.Z.EUS.EXTENSION:udica-0:0.2.6-5.module+el8.6.0+24209+25a14987.src::container-tools:rhel8"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
}
]
}
RHSA-2026:54757
Vulnerability from csaf_redhat - Published: 2026-08-13 23:45 - Updated: 2026-08-29 08:38Summary
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory
Severity
Important
Notes
Topic: An update for Red Hat OpenStack Platform 16.2 (Train) is now available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.
Security Fix(es):
* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova (CVE-2026-24708)
* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)
* openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access (CVE-2026-34881)
* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)
* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
* etcd: etcd: Authorization bypass allows information disclosure and denial of service (CVE-2026-33413)
* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation (CVE-2026-42789)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification (CVE-2026-44393)
* erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing (CVE-2026-42790)
* openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw (CVE-2025-65073)
* OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation (CVE-2026-43001)
* openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation (CVE-2026-33551)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS (Amazon Web Services) signature to the /v3/ec2tokens or /v3/s3tokens API (Application Programming Interface) endpoints.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Moderate
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Vendor Fix
fix
|
Known not affected
211 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw disk and trigger destructive behavior during instance operations such as resize.
7.1 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
206 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
214 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.
7.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full set of the parent user's S3 permissions. This effectively bypasses the role restrictions imposed on the application credential, leading to unauthorized access and privilege escalation. This issue affects deployments that use restricted application credentials in combination with the EC2/S3 compatibility API.
CWE-266 - Incorrect Privilege AssignmentAffected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Low
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — | ||
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — | ||
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
207 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack Glance. An authenticated user can exploit a Server-Side Request Forgery (SSRF) vulnerability within the web-download import feature. This vulnerability stems from inadequate validation of Uniform Resource Identifiers (URIs), which can be circumvented using HTTP redirects or alternative IP encodings. Successful exploitation allows an attacker to gain unauthorized access to internal network resources and potentially exfiltrate sensitive data.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
212 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Erlang OTP's public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.
8.0 (High)
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.
7.4 (High)
Affected products
Fixed
61 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied project_id for an EC2-type credential was not validated against the project of the authenticating application credential. This allows the attacker to create an EC2 credential targeting a different project. Subsequently, a /v3/ec2tokens exchange would issue a Keystone token scoped to the targeted project, enabling unauthorized cross-project access and lateral movement within the credential owner's role footprint.
8.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
216 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS (Transport Layer Security) connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonate the RabbitMQ broker. This allows the attacker to perform a man-in-the-middle attack, potentially leading to the disclosure or manipulation of sensitive RPC (Remote Procedure Call) and notification traffic.
7.4 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
213 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src | — |
Workaround
|
|
| Unresolved product id: 8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch | — |
Workaround
|
Threats
Impact
Important
References
199 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat OpenStack Platform 16.2 (Train) is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service (IaaS) cloud running on commonly available physical hardware.\n\nSecurity Fix(es):\n\n* crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n\n* openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova (CVE-2026-24708)\n\n* pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)\n\n* golang: net/url: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n\n* crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption (CVE-2025-68121)\n\n* openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access (CVE-2026-34881)\n\n* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)\n\n* net/url: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* etcd: etcd: Authorization bypass allows information disclosure and denial of service (CVE-2026-33413)\n\n* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\n* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n\n* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n\n* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n\n* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation (CVE-2026-42789)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification (CVE-2026-44393)\n\n* erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing (CVE-2026-42790)\n\n* openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw (CVE-2025-65073)\n\n* OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation (CVE-2026-43001)\n\n* openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation (CVE-2026-33551)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54757",
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2415344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415344"
},
{
"category": "external",
"summary": "2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "2430312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430312"
},
{
"category": "external",
"summary": "2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "2440368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440368"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "2451037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451037"
},
{
"category": "external",
"summary": "2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "2464305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464305"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2482093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093"
},
{
"category": "external",
"summary": "2482286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482286"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2484835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484835"
},
{
"category": "external",
"summary": "OSPRH-20808",
"url": "https://issues.redhat.com/browse/OSPRH-20808"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54757.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory",
"tracking": {
"current_release_date": "2026-08-29T08:38:21+00:00",
"generator": {
"date": "2026-08-29T08:38:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54757",
"initial_release_date": "2026-08-13T23:45:16+00:00",
"revision_history": [
{
"date": "2026-08-13T23:45:16+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-13T23:45:16+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T08:38:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 16.2",
"product": {
"name": "Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:16.2::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product_id": "python-pyasn1-0:0.4.6-4.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pyasn1@0.4.6-4.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "erlang-0:23.3.4.18-2.el8ost.src",
"product": {
"name": "erlang-0:23.3.4.18-2.el8ost.src",
"product_id": "erlang-0:23.3.4.18-2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang@23.3.4.18-2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product_id": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product_id": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product_id": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product_id": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product_id": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-haproxy@4.1.1-2.20250728141134.df96ffc.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product_id": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-git@0.5.0-2.20250728140843.4e4498e.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product_id": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product": {
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product_id": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift@2.23.4-2.20260121154927.70b68db.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product_id": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-inifile@3.1.1-2.20250728133040.91efced.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product_id": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-module-data@0.5.1-2.20250728142646.28dafce.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product_id": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-apache@5.1.1-2.20250728133931.1fa9b1c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product_id": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-java@5.0.2-2.20250804144904.e57cbc8.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product_id": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-corosync@6.0.2-2.20250728134759.961add3.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product_id": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-datacat@0.6.3-2.20250728140400.5cce8f2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product_id": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@11.6.1-2.20251125134914.9adcac6.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product_id": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product_id": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-firewall@3.4.1-2.20250728144450.94f707c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product_id": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-concat@6.1.1-2.20250728133127.9baa8fc.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product_id": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-ipaclient@2.5.2-2.20250728141812.b086731.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product_id": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-keepalived@0.0.2-2.20250728142002.bbca37a.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product_id": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-stdlib@6.1.1-2.20250728131928.5aa891c.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product_id": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-rabbitmq@10.1.2-2.20250728144344.8b9b006.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product_id": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-remote@10.0.0-2.20250728135533.7420908.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product_id": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-staging@1.0.5-2.20250728134218.b466d93.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product_id": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-snmp@3.9.1-2.20250728142735.5d73485.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product_id": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-vcsrepo@3.0.1-2.20250728140014.b06d5d3.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product_id": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tomcat@3.1.1-2.20250804144904.a3f92d1.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product_id": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-xinetd@3.3.1-2.20250728135145.d768da2.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product": {
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product_id": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-collectd-gnocchi@1.7.2-2.20250728143604.de115a7.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product_id": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-gnocchiclient@7.0.4-2.20250728131928.64814b9.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product_id": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-oslo-messaging@10.2.4-2.20260710155333.82281a0.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product_id": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tripleo-ansible@0.8.1-2.20260112154909.123ce73.el8ost?arch=src"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.src",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.src",
"product_id": "etcd-0:3.3.23-22.el8ost.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product_id": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility-debuginfo@0.2.1-1.1.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-compiler@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-eldap@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-hipe@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-inets@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-kernel@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-mnesia@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-parsetools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-public_key@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-sasl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-snmp@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-ssl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-stdlib@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-syntax_tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-xmerl@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debugsource@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erl_interface-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-odbc-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_id": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools-debuginfo@23.3.4.18-2.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debugsource@3.3.23-22.el8ost?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product_id": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debuginfo@3.3.23-22.el8ost?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product_id": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility@0.2.1-1.1.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product_id": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/collectd-sensubility-debuginfo@0.2.1-1.1.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-compiler@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-eldap@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-hipe@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-inets@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-kernel@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-mnesia@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-parsetools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-public_key@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-sasl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-snmp@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-ssl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-stdlib@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-syntax_tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-xmerl@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debugsource@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-asn1-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-crypto-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erl_interface-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-erts-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-odbc-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-os_mon-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-runtime_tools-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_id": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/erlang-tools-debuginfo@23.3.4.18-2.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd@3.3.23-22.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debugsource@3.3.23-22.el8ost?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product_id": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/etcd-debuginfo@3.3.23-22.el8ost?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product_id": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pyasn1@0.4.6-4.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product_id": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-pyasn1-modules@0.4.6-4.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_id": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product": {
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_id": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-glance@19.0.5-2.20260512165254.eb6ad61.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_id": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_id": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-cinder@15.6.1-2.20250708154832.299553a.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-api@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-common@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-compute@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-conductor@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-console@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-migration@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-novncproxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-scheduler@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-serialproxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-nova-spicehtml5proxy@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product": {
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_id": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-nova@20.6.2-2.20260317135026.8a24acd.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-container-base@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-containers@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-common-devtools@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product": {
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_id": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tripleo-common@11.7.1-2.20251029134905.e189622.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product_id": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-haproxy@4.1.1-2.20250728141134.df96ffc.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product_id": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-git@0.5.0-2.20250728140843.4e4498e.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_id": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product": {
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_id": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-keystone@16.0.3-2.20260616134936.9d699a7.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-account@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-container@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-object@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-swift-proxy@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product": {
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_id": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-swift@2.23.4-2.20260121154927.70b68db.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product_id": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-inifile@3.1.1-2.20250728133040.91efced.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product_id": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-module-data@0.5.1-2.20250728142646.28dafce.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product_id": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-apache@5.1.1-2.20250728133931.1fa9b1c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product_id": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-java@5.0.2-2.20250804144904.e57cbc8.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product_id": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-corosync@6.0.2-2.20250728134759.961add3.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product_id": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-datacat@0.6.3-2.20250728140400.5cce8f2.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product_id": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tripleo-heat-templates@11.6.1-2.20251125134914.9adcac6.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openstack-tempest-all@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tempest@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product": {
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_id": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-tempest-tests@26.1.0-2.20250728145114.271f820.el8ost?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product_id": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-firewall@3.4.1-2.20250728144450.94f707c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product_id": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-concat@6.1.1-2.20250728133127.9baa8fc.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product_id": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-ipaclient@2.5.2-2.20250728141812.b086731.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product_id": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-keepalived@0.0.2-2.20250728142002.bbca37a.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product_id": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-stdlib@6.1.1-2.20250728131928.5aa891c.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product_id": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-rabbitmq@10.1.2-2.20250728144344.8b9b006.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product_id": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-remote@10.0.0-2.20250728135533.7420908.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product_id": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-staging@1.0.5-2.20250728134218.b466d93.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product_id": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-snmp@3.9.1-2.20250728142735.5d73485.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product_id": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-vcsrepo@3.0.1-2.20250728140014.b06d5d3.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product_id": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-tomcat@3.1.1-2.20250804144904.a3f92d1.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product_id": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/puppet-xinetd@3.3.1-2.20250728135145.d768da2.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product": {
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product_id": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-collectd-gnocchi@1.7.2-2.20250728143604.de115a7.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product_id": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-gnocchiclient@7.0.4-2.20250728131928.64814b9.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product_id": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-oslo-messaging@10.2.4-2.20260710155333.82281a0.el8ost?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product_id": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tripleo-ansible@0.8.1-2.20260112154909.123ce73.el8ost?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64"
},
"product_reference": "collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le"
},
"product_reference": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
},
"product_reference": "collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-0:23.3.4.18-2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src"
},
"product_reference": "erlang-0:23.3.4.18-2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le"
},
"product_reference": "erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
},
"product_reference": "erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le"
},
"product_reference": "etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64 as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
},
"product_reference": "etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
},
"product_reference": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src"
},
"product_reference": "openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
},
"product_reference": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src"
},
"product_reference": "openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src"
},
"product_reference": "openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src"
},
"product_reference": "openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src"
},
"product_reference": "openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src"
},
"product_reference": "openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch"
},
"product_reference": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src"
},
"product_reference": "openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src"
},
"product_reference": "python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src"
},
"product_reference": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch"
},
"product_reference": "python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
},
"product_reference": "python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
},
"product_reference": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
},
"product_reference": "python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
},
"product_reference": "python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch"
},
"product_reference": "python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch"
},
"product_reference": "python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch"
},
"product_reference": "python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch"
},
"product_reference": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src"
},
"product_reference": "tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src"
},
"product_reference": "openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch"
},
"product_reference": "python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-CINDERLIB-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src"
},
"product_reference": "puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src"
},
"product_reference": "puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src"
},
"product_reference": "puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src"
},
"product_reference": "puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src"
},
"product_reference": "puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src"
},
"product_reference": "puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src"
},
"product_reference": "puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src"
},
"product_reference": "puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src"
},
"product_reference": "puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src"
},
"product_reference": "puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src"
},
"product_reference": "puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src"
},
"product_reference": "puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src"
},
"product_reference": "puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src"
},
"product_reference": "puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src"
},
"product_reference": "puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src"
},
"product_reference": "puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src"
},
"product_reference": "puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src"
},
"product_reference": "puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src"
},
"product_reference": "puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src"
},
"product_reference": "puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyasn1-0:0.4.6-4.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src"
},
"product_reference": "python-pyasn1-0:0.4.6-4.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-pyasn1-0:0.4.6-4.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
},
"product_reference": "python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-DEPLOYMENT-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src"
},
"product_reference": "python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src"
},
"product_reference": "python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
},
"product_reference": "python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2",
"product_id": "8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
},
"product_reference": "python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"relates_to_product_reference": "8Base-RHOS-TOOLS-16.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-65073",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"discovery_date": "2025-11-17T08:00:54.372992+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2415344"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack\u0027s Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS (Amazon Web Services) signature to the /v3/ec2tokens or /v3/s3tokens API (Application Programming Interface) endpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability allows an attacker to obtain a valid OpenStack\u0027s Keystone token belonging to a valid user by sending a valid AWS signature to the /v3/ec2tokens or /v3/s3tokens API\u0027s endpoints, leading to access to unauthorized resources or privilege escalation within the OpenStack instance.\n\nThis attack is considered to have a high complexity (AC:H) due to the fact of obtaining such valid AWS token is not straight forward. To be considered vulnerable, the OpenStack deployments should expose the related API end points through a public API or external access.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-65073"
},
{
"category": "external",
"summary": "RHBZ#2415344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-65073",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-65073"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-65073",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-65073"
},
{
"category": "external",
"summary": "https://security.openstack.org/ossa/OSSA-2025-002.html",
"url": "https://security.openstack.org/ossa/OSSA-2025-002.html"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2025/11/04/2",
"url": "https://www.openwall.com/lists/oss-security/2025/11/04/2"
}
],
"release_date": "2025-11-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-keystone: OpenStack Keystone: Unauthorized access and privilege escalation via AWS signature validation flaw"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"acknowledgments": [
{
"names": [
"Dan Smith"
],
"organization": "RedHat"
}
],
"cve": "CVE-2026-24708",
"cwe": {
"id": "CWE-73",
"name": "External Control of File Name or Path"
},
"discovery_date": "2026-01-16T06:29:23.249000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430312"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in OpenStack Nova\u2019s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw disk and trigger destructive behavior during instance operations such as resize.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat OpenStack Platform. An authenticated attacker can exploit unconstrained disk format handling in OpenStack Nova when invoking qemu-img. By crafting a QCOW2 header on an ephemeral or root disk, an attacker can cause qemu-img to overwrite arbitrary files on the compute host with Nova\u0027s write access, leading to data destruction or denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24708"
},
{
"category": "external",
"summary": "RHBZ#2430312",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430312"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24708"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24708",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24708"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/nova/+bug/2137507",
"url": "https://bugs.launchpad.net/nova/+bug/2137507"
}
],
"release_date": "2026-02-17T15:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33413",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-03-26T14:03:01.896580+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451728"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lease management, and trigger data compaction, leading to permanent data loss and disruption of critical workflows. This vulnerability can result in information disclosure and denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "etcd: etcd: Authorization bypass allows information disclosure and denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in etcd allows unauthorized users to bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients and etcd\u0027s built-in authentication is enabled. This can lead to information disclosure and denial of service. Typical Red Hat OpenShift Container Platform and Kubernetes deployments are not affected, as the Kubernetes API server handles authentication and authorization independently of etcd\u0027s internal mechanisms.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33413"
},
{
"category": "external",
"summary": "RHBZ#2451728",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451728"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33413"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33413"
},
{
"category": "external",
"summary": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg",
"url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg"
}
],
"release_date": "2026-03-26T13:36:10.919000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Restrict network access to etcd server ports to ensure only trusted components can establish connections. Implement strong client identity at the transport layer, such as mTLS, with tightly scoped client certificate distribution. This will limit unauthorized access to etcd functions.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "etcd: etcd: Authorization bypass allows information disclosure and denial of service"
},
{
"acknowledgments": [
{
"names": [
"Maxence Bornecque"
],
"organization": "Orange Cyberdefense CERT Vulnerability Intelligence Watch Team"
}
],
"cve": "CVE-2026-33551",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-03-24T23:40:47.060000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451037"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. An authenticated user with a reader role can exploit a vulnerability in the EC2 credential creation endpoint. By using a restricted application credential to call the EC2 credential creation API, the user may obtain EC2/S3 credentials that carry the full set of the parent user\u0027s S3 permissions. This effectively bypasses the role restrictions imposed on the application credential, leading to unauthorized access and privilege escalation. This issue affects deployments that use restricted application credentials in combination with the EC2/S3 compatibility API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33551"
},
{
"category": "external",
"summary": "RHBZ#2451037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33551",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33551"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33551",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33551"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/04/07/12",
"url": "http://www.openwall.com/lists/oss-security/2026/04/07/12"
},
{
"category": "external",
"summary": "https://security.openstack.org/ossa/OSSA-2026-005.html",
"url": "https://security.openstack.org/ossa/OSSA-2026-005.html"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/07/12",
"url": "https://www.openwall.com/lists/oss-security/2026/04/07/12"
}
],
"release_date": "2026-04-07T15:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"acknowledgments": [
{
"names": [
"Hyeongeun_Ji"
],
"organization": "Open the Window"
},
{
"names": [
"Abhishek Kekane"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-34881",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-17T13:36:28.695000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2440368"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Glance. An authenticated user can exploit a Server-Side Request Forgery (SSRF) vulnerability within the web-download import feature. This vulnerability stems from inadequate validation of Uniform Resource Identifiers (URIs), which can be circumvented using HTTP redirects or alternative IP encodings. Successful exploitation allows an attacker to gain unauthorized access to internal network resources and potentially exfiltrate sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in OpenStack Glance\u0027s web-download import feature allows an authenticated user to perform Server-Side Request Forgery (SSRF). The vulnerability arises from insufficient validation of URIs, which can be bypassed through HTTP redirects or alternative IP encodings. This enables an attacker to access internal network resources and potentially exfiltrate sensitive information within the cloud environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34881"
},
{
"category": "external",
"summary": "RHBZ#2440368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440368"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34881"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/glance/+bug/2138602",
"url": "https://bugs.launchpad.net/glance/+bug/2138602"
}
],
"release_date": "2026-03-25T20:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openstack-glance: OpenStack Glance: Server-Side Request Forgery leading to unauthorized internal network access"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42789",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T15:10:36.175135+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482093"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP\u0027s public_key module. This vulnerability (CWE-295), related to improper certificate validation, allows a non-Certificate Authority (CA) certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can exploit this by forging leaf certificates for arbitrary identities. This can lead to compromised server identity verification on the client side and client certificate verification on mutual Transport Layer Security (mTLS) servers, undermining the trust in certificate-based authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where Erlang OTP\u0027s `public_key` module improperly validates certificate chains. A remote attacker with an existing end-entity certificate from a trusted Certificate Authority can forge new leaf certificates, leading to compromised server or client identity verification in TLS/mTLS connections. This impacts applications within Red Hat OpenStack Platform and Community Projects that utilize the default verifier in the OTP `ssl` application. Because an attacker must be able to create or locate a certificate with specific attributes, Red Hat assesses the impact of this vulnerability as Important.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42789"
},
{
"category": "external",
"summary": "RHBZ#2482093",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482093"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42789"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42789"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42789.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42789.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db",
"url": "https://github.com/erlang/otp/commit/471cd2f664300a95353c467873800bbe706005db"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd",
"url": "https://github.com/erlang/otp/commit/59c8d824386b2eb1614ff9340624843ef6aca0fd"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-c99q-jmpx-v8qq"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42789",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42789"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T12:23:06.355000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation"
},
{
"cve": "CVE-2026-42790",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-27T17:02:53.354271+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482286"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Erlang OTP public_key. This improper certificate validation vulnerability allows a subordinate Certificate Authority (CA) with restricted DNS nameConstraints to bypass these restrictions. By issuing a leaf certificate that lacks a Subject Alternative Name (SAN) but contains a crafted CommonName (CN), an attacker can trick an Erlang OTP TLS client into accepting it as valid for an out-of-scope hostname. This can lead to hostname spoofing and potential man-in-the-middle attacks, compromising the integrity and confidentiality of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Erlang OTP\u0027s public_key module allows a subordinate Certificate Authority to bypass DNS name constraints during TLS hostname verification. An attacker could exploit this by issuing a specially crafted certificate lacking a Subject Alternative Name but containing a malicious CommonName, enabling hostname spoofing and potential man-in-the-middle attacks against Red Hat products acting as Erlang OTP TLS clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42790"
},
{
"category": "external",
"summary": "RHBZ#2482286",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482286"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42790"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-42790.html",
"url": "https://cna.erlef.org/cves/CVE-2026-42790.html"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759",
"url": "https://github.com/erlang/otp/commit/0769050c69d73762672b0db1347b6993a5b31759"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a",
"url": "https://github.com/erlang/otp/commit/21abed64eb2026b5f82f432709e4e932f9be389a"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457",
"url": "https://github.com/erlang/otp/commit/fb67c6d1836f51105a96d8b769e71e4215a79457"
},
{
"category": "external",
"summary": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447",
"url": "https://github.com/erlang/otp/security/advisories/GHSA-22cw-4ph4-6447"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-42790",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-42790"
},
{
"category": "external",
"summary": "https://www.erlang.org/doc/system/versions.html#order-of-versions",
"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
}
],
"release_date": "2026-05-27T15:09:01.860000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "Ensure all TLS certificates used in the deployment include Subject Alternative Name (SAN) extensions with the appropriate DNS entries. Certificates relying solely on the CommonName (CN) field for hostname identification are susceptible to this bypass. For Erlang applications, the verify_fun option in the ssl module can be configured to reject peer certificates missing the subjectAltName extension.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "erlang: Erlang OTP public_key: Certificate validation bypass allows hostname spoofing"
},
{
"cve": "CVE-2026-43001",
"cwe": {
"id": "CWE-1288",
"name": "Improper Validation of Consistency within Input"
},
"discovery_date": "2026-05-01T09:00:55.408726+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2464305"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack Keystone. An attacker holding an unrestricted application credential could exploit a vulnerability in the POST /v3/credentials endpoint where the caller-supplied project_id for an EC2-type credential was not validated against the project of the authenticating application credential. This allows the attacker to create an EC2 credential targeting a different project. Subsequently, a /v3/ec2tokens exchange would issue a Keystone token scoped to the targeted project, enabling unauthorized cross-project access and lateral movement within the credential owner\u0027s role footprint.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in OpenStack Keystone allows an attacker with an unrestricted application credential to bypass project isolation. By exploiting improper validation during EC2 credential creation, an attacker can gain unauthorized access and move laterally between projects within a Red Hat OpenStack Platform deployment, compromising multi-tenant security. If the roles from the original project the attacker holds a credential are compatible with the roles in the project the attacker is targeting, the attacker can perform the same actions granted permission from the initial project in the targeted project. Depending on the level of privileges the attacker has that means a high impact for confidentiality, availability and integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43001"
},
{
"category": "external",
"summary": "RHBZ#2464305",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464305"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43001"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43001",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43001"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/keystone/+bug/2149775",
"url": "https://bugs.launchpad.net/keystone/+bug/2149775"
},
{
"category": "external",
"summary": "https://review.opendev.org/c/openstack/keystone/+/985804",
"url": "https://review.opendev.org/c/openstack/keystone/+/985804"
}
],
"release_date": "2026-05-01T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To reduce exposure, ensure that OpenStack application credentials are created with the most restrictive scope possible, limiting their permissions to only what is essential for their intended function. If EC2 credentials are not actively used within your OpenStack deployment, consider disabling the EC2 credential API endpoint in Keystone to prevent unauthorized creation of cross-project EC2 credentials. Refer to the OpenStack Keystone administration guide for detailed instructions on managing application credential scopes and disabling API endpoints. Any changes to Keystone configuration may require a service restart to take effect.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenStack Keystone: OpenStack Keystone: Unauthorized cross-project access due to improper validation in EC2 credential creation"
},
{
"cve": "CVE-2026-44393",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-04T16:01:33.285581+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484835"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS (Transport Layer Security) connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonate the RabbitMQ broker. This allows the attacker to perform a man-in-the-middle attack, potentially leading to the disclosure or manipulation of sensitive RPC (Remote Procedure Call) and notification traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in OpenStack oslo.messaging impacts Red Hat OpenStack Platform and OpenShift Container Platform when using RabbitMQ with TLS. The vulnerability arises from the RabbitMQ driver\u0027s failure to perform proper hostname verification during TLS connection establishment. This oversight enables an attacker capable of intercepting control-plane network traffic to impersonate the RabbitMQ broker, potentially leading to man-in-the-middle attacks that compromise the confidentiality and integrity of sensitive RPC and notification data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
],
"known_not_affected": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44393"
},
{
"category": "external",
"summary": "RHBZ#2484835",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484835"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44393"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44393",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44393"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/oslo.messaging/+bug/2150316",
"url": "https://bugs.launchpad.net/oslo.messaging/+bug/2150316"
},
{
"category": "external",
"summary": "https://wiki.openstack.org/wiki/OSSN/OSSN-0096",
"url": "https://wiki.openstack.org/wiki/OSSN/OSSN-0096"
}
],
"release_date": "2026-06-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T23:45:16+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"category": "workaround",
"details": "To mitigate the risk of man-in-the-middle attacks, restrict network access to the RabbitMQ message broker. Configure firewall rules to permit inbound connections to the RabbitMQ port (typically 5672 or 5671 for AMQPS) only from authorized hosts and services within the control plane. This operational measure reduces the exposure to attackers attempting to intercept and impersonate the broker.",
"product_ids": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.src",
"8Base-RHOS-16.2:collectd-sensubility-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.ppc64le",
"8Base-RHOS-16.2:collectd-sensubility-debuginfo-0:0.2.1-1.1.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-0:23.3.4.18-2.el8ost.src",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-asn1-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-compiler-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-crypto-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-debugsource-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-eldap-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erl_interface-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-erts-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-hipe-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-inets-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-kernel-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-mnesia-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-odbc-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-os_mon-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-parsetools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-public_key-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-runtime_tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-sasl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-snmp-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-ssl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-stdlib-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-syntax_tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-tools-debuginfo-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.ppc64le",
"8Base-RHOS-16.2:erlang-xmerl-0:23.3.4.18-2.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.src",
"8Base-RHOS-16.2:etcd-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debuginfo-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.ppc64le",
"8Base-RHOS-16.2:etcd-debugsource-0:3.3.23-22.el8ost.x86_64",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:openstack-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.src",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:openstack-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.src",
"8Base-RHOS-16.2:openstack-nova-api-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-common-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-compute-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-conductor-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-console-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-migration-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-novncproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-scheduler-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-serialproxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-nova-spicehtml5proxy-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.src",
"8Base-RHOS-16.2:openstack-swift-account-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-container-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-object-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-swift-proxy-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.src",
"8Base-RHOS-16.2:openstack-tempest-all-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.src",
"8Base-RHOS-16.2:openstack-tripleo-common-container-base-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-containers-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-common-devtools-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.noarch",
"8Base-RHOS-16.2:openstack-tripleo-heat-templates-0:11.6.1-2.20251125134914.9adcac6.el8ost.src",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-16.2:python-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.src",
"8Base-RHOS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-16.2:python3-collectd-gnocchi-0:1.7.2-2.20250728143604.de115a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-glance-1:19.0.5-2.20260512165254.eb6ad61.el8ost.noarch",
"8Base-RHOS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-16.2:python3-keystone-1:16.0.3-2.20260616134936.9d699a7.el8ost.noarch",
"8Base-RHOS-16.2:python3-nova-1:20.6.2-2.20260317135026.8a24acd.el8ost.noarch",
"8Base-RHOS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-16.2:python3-swift-0:2.23.4-2.20260121154927.70b68db.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tempest-tests-1:26.1.0-2.20250728145114.271f820.el8ost.noarch",
"8Base-RHOS-16.2:python3-tripleo-common-0:11.7.1-2.20251029134905.e189622.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.noarch",
"8Base-RHOS-16.2:tripleo-ansible-0:0.8.1-2.20260112154909.123ce73.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:openstack-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-CINDERLIB-16.2:python3-cinder-1:15.6.1-2.20250708154832.299553a.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-CINDERLIB-16.2:python3-pyasn1-modules-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-apache-0:5.1.1-2.20250728133931.1fa9b1c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-concat-0:6.1.1-2.20250728133127.9baa8fc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-corosync-0:6.0.2-2.20250728134759.961add3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-datacat-0:0.6.3-2.20250728140400.5cce8f2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-firewall-0:3.4.1-2.20250728144450.94f707c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-git-0:0.5.0-2.20250728140843.4e4498e.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-haproxy-0:4.1.1-2.20250728141134.df96ffc.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-inifile-0:3.1.1-2.20250728133040.91efced.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-ipaclient-0:2.5.2-2.20250728141812.b086731.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-java-0:5.0.2-2.20250804144904.e57cbc8.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-keepalived-0:0.0.2-2.20250728142002.bbca37a.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-module-data-0:0.5.1-2.20250728142646.28dafce.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-rabbitmq-0:10.1.2-2.20250728144344.8b9b006.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-remote-0:10.0.0-2.20250728135533.7420908.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-snmp-0:3.9.1-2.20250728142735.5d73485.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-staging-0:1.0.5-2.20250728134218.b466d93.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-stdlib-0:6.1.1-2.20250728131928.5aa891c.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-tomcat-0:3.1.1-2.20250804144904.a3f92d1.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-vcsrepo-0:3.0.1-2.20250728140014.b06d5d3.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.noarch",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:puppet-xinetd-0:3.3.1-2.20250728135145.d768da2.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python-pyasn1-0:0.4.6-4.el8ost.src",
"8Base-RHOS-DEPLOYMENT-TOOLS-16.2:python3-pyasn1-0:0.4.6-4.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.src",
"8Base-RHOS-TOOLS-16.2:python3-gnocchiclient-0:7.0.4-2.20250728131928.64814b9.el8ost.noarch",
"8Base-RHOS-TOOLS-16.2:python3-oslo-messaging-0:10.2.4-2.20260710155333.82281a0.el8ost.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification"
}
]
}
RHSA-2026:56143
Vulnerability from csaf_redhat - Published: 2026-08-18 12:17 - Updated: 2026-08-28 08:15Summary
Red Hat Security Advisory: grafana-pcp security update
Severity
Important
Notes
Topic: An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.\n\nSecurity Fix(es):\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:56143",
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56143.json"
}
],
"title": "Red Hat Security Advisory: grafana-pcp security update",
"tracking": {
"current_release_date": "2026-08-28T08:15:03+00:00",
"generator": {
"date": "2026-08-28T08:15:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:56143",
"initial_release_date": "2026-08-18T12:17:45+00:00",
"revision_history": [
{
"date": "2026-08-18T12:17:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-18T12:17:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-28T08:15:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.src",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.src",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"product": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"product_id": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.3.0-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"product": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"product_id": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.3.0-1.el10_0?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"product": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"product_id": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.3.0-1.el10_0?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.3.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64"
},
"product_reference": "grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64"
},
"product_reference": "grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
},
"product_reference": "grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T12:17:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T12:17:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T12:17:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56143"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.src",
"AppStream-10.0.Z.E2S:grafana-pcp-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debuginfo-0:5.3.0-1.el10_0.x86_64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.aarch64",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.ppc64le",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.s390x",
"AppStream-10.0.Z.E2S:grafana-pcp-debugsource-0:5.3.0-1.el10_0.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:56223
Vulnerability from csaf_redhat - Published: 2026-08-18 15:31 - Updated: 2026-08-28 08:15Summary
Red Hat Security Advisory: grafana-pcp security update
Severity
Important
Notes
Topic: An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.
Security Fix(es):
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards.\n\nSecurity Fix(es):\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:56223",
"url": "https://access.redhat.com/errata/RHSA-2026:56223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56223.json"
}
],
"title": "Red Hat Security Advisory: grafana-pcp security update",
"tracking": {
"current_release_date": "2026-08-28T08:15:03+00:00",
"generator": {
"date": "2026-08-28T08:15:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:56223",
"initial_release_date": "2026-08-18T15:31:40+00:00",
"revision_history": [
{
"date": "2026-08-18T15:31:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-18T15:31:40+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-28T08:15:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.1.1-15.el9_6.src",
"product": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.src",
"product_id": "grafana-pcp-0:5.1.1-15.el9_6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.1.1-15.el9_6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"product": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"product_id": "grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.1.1-15.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"product": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"product_id": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.1.1-15.el9_6?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"product": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"product_id": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.1.1-15.el9_6?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"product": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"product_id": "grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.1.1-15.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"product": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"product_id": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.1.1-15.el9_6?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"product": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"product_id": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.1.1-15.el9_6?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.1.1-15.el9_6.s390x",
"product": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.s390x",
"product_id": "grafana-pcp-0:5.1.1-15.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.1.1-15.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"product": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"product_id": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.1.1-15.el9_6?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"product": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"product_id": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.1.1-15.el9_6?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"product": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"product_id": "grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp@5.1.1-15.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64",
"product": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64",
"product_id": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debugsource@5.1.1-15.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"product": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"product_id": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana-pcp-debuginfo@5.1.1-15.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64"
},
"product_reference": "grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le"
},
"product_reference": "grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x"
},
"product_reference": "grafana-pcp-0:5.1.1-15.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src"
},
"product_reference": "grafana-pcp-0:5.1.1-15.el9_6.src",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-0:5.1.1-15.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64"
},
"product_reference": "grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64"
},
"product_reference": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le"
},
"product_reference": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x"
},
"product_reference": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64"
},
"product_reference": "grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64"
},
"product_reference": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le"
},
"product_reference": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x"
},
"product_reference": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"product_id": "AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
},
"product_reference": "grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64",
"relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T15:31:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56223"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T15:31:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56223"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-18T15:31:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:56223"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.src",
"AppStream-9.6.0.Z.EUS:grafana-pcp-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debuginfo-0:5.1.1-15.el9_6.x86_64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.aarch64",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.ppc64le",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.s390x",
"AppStream-9.6.0.Z.EUS:grafana-pcp-debugsource-0:5.1.1-15.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:57126
Vulnerability from csaf_redhat - Published: 2026-08-19 19:58 - Updated: 2026-08-28 08:15Summary
Red Hat Security Advisory: yggdrasil security update
Severity
Important
Notes
Topic: An update for yggdrasil is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child "worker" process, exchanging data with its worker processes through a D-Bus message broker.
Security Fix(es):
* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for yggdrasil is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "yggdrasil is a system daemon that subscribes to topics on an MQTT broker and routes any data received on the topics to an appropriate child \"worker\" process, exchanging data with its worker processes through a D-Bus message broker.\n\nSecurity Fix(es):\n\n* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:57126",
"url": "https://access.redhat.com/errata/RHSA-2026:57126"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57126.json"
}
],
"title": "Red Hat Security Advisory: yggdrasil security update",
"tracking": {
"current_release_date": "2026-08-28T08:15:08+00:00",
"generator": {
"date": "2026-08-28T08:15:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:57126",
"initial_release_date": "2026-08-19T19:58:04+00:00",
"revision_history": [
{
"date": "2026-08-19T19:58:04+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-19T19:58:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-28T08:15:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.src",
"product": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.src",
"product_id": "yggdrasil-0:0.4.9.2-1.el10_2.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.9.2-1.el10_2.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64",
"product": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64",
"product_id": "yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.9.2-1.el10_2.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"product": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"product_id": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.9.2-1.el10_2.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"product_id": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.9.2-1.el10_2.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.9.2-1.el10_2.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64",
"product": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64",
"product_id": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.9.2-1.el10_2.2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le",
"product": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_id": "yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.9.2-1.el10_2.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"product": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_id": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.9.2-1.el10_2.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_id": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.9.2-1.el10_2.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.9.2-1.el10_2.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le",
"product": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_id": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.9.2-1.el10_2.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.s390x",
"product": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.s390x",
"product_id": "yggdrasil-0:0.4.9.2-1.el10_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.9.2-1.el10_2.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"product": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"product_id": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.9.2-1.el10_2.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"product_id": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.9.2-1.el10_2.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.9.2-1.el10_2.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x",
"product": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x",
"product_id": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.9.2-1.el10_2.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64",
"product": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64",
"product_id": "yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil@0.4.9.2-1.el10_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"product": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"product_id": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debugsource@0.4.9.2-1.el10_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"product": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"product_id": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-debuginfo@0.4.9.2-1.el10_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"product": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"product_id": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-examples-debuginfo@0.4.9.2-1.el10_2.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64",
"product": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64",
"product_id": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-devel@0.4.9.2-1.el10_2.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.src"
},
"product_reference": "yggdrasil-0:0.4.9.2-1.el10_2.2.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"relates_to_product_reference": "CRB-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64"
},
"product_reference": "yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"relates_to_product_reference": "CRB-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.src",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T19:58:04+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.src",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57126"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.src",
"AppStream-10.2.Z:yggdrasil-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"AppStream-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-debugsource-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-devel-0:0.4.9.2-1.el10_2.2.x86_64",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.aarch64",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.ppc64le",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.s390x",
"CRB-10.2.Z:yggdrasil-examples-debuginfo-0:0.4.9.2-1.el10_2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
RHSA-2026:57649
Vulnerability from csaf_redhat - Published: 2026-08-20 18:54 - Updated: 2026-08-29 05:19Summary
Red Hat Security Advisory: golang security update
Severity
Important
Notes
Topic: An update for golang is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The golang packages provide the Go programming language compiler.
Security Fix(es):
* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)
* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)
* cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)
* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)
* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)
* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)
* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.
5.9 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the 'go bug' command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.
4.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.
7.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.
6.5 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
136 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)\n\n* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)\n\n* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)\n\n* cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)\n\n* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)\n\n* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)\n\n* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)\n\n* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:57649",
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57649.json"
}
],
"title": "Red Hat Security Advisory: golang security update",
"tracking": {
"current_release_date": "2026-08-29T05:19:03+00:00",
"generator": {
"date": "2026-08-29T05:19:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:57649",
"initial_release_date": "2026-08-20T18:54:33+00:00",
"revision_history": [
{
"date": "2026-08-20T18:54:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-20T18:54:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T05:19:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_4.aarch64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_4.aarch64",
"product_id": "go-toolset-0:1.26.5-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_4.aarch64",
"product": {
"name": "golang-0:1.26.5-1.el9_4.aarch64",
"product_id": "golang-0:1.26.5-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_4.aarch64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_4.aarch64",
"product_id": "golang-bin-0:1.26.5-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_4.aarch64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_4.aarch64",
"product_id": "golang-race-0:1.26.5-1.el9_4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_4.ppc64le",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_4.ppc64le",
"product_id": "go-toolset-0:1.26.5-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_4.ppc64le",
"product": {
"name": "golang-0:1.26.5-1.el9_4.ppc64le",
"product_id": "golang-0:1.26.5-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_4.ppc64le",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_4.ppc64le",
"product_id": "golang-bin-0:1.26.5-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_4.ppc64le",
"product": {
"name": "golang-race-0:1.26.5-1.el9_4.ppc64le",
"product_id": "golang-race-0:1.26.5-1.el9_4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_4.x86_64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_4.x86_64",
"product_id": "go-toolset-0:1.26.5-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_4.x86_64",
"product": {
"name": "golang-0:1.26.5-1.el9_4.x86_64",
"product_id": "golang-0:1.26.5-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_4.x86_64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_4.x86_64",
"product_id": "golang-bin-0:1.26.5-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_4.x86_64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_4.x86_64",
"product_id": "golang-race-0:1.26.5-1.el9_4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_4.s390x",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_4.s390x",
"product_id": "go-toolset-0:1.26.5-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_4.s390x",
"product": {
"name": "golang-0:1.26.5-1.el9_4.s390x",
"product_id": "golang-0:1.26.5-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_4.s390x",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_4.s390x",
"product_id": "golang-bin-0:1.26.5-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_4.s390x",
"product": {
"name": "golang-race-0:1.26.5-1.el9_4.s390x",
"product_id": "golang-race-0:1.26.5-1.el9_4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_4.src",
"product": {
"name": "golang-0:1.26.5-1.el9_4.src",
"product_id": "golang-0:1.26.5-1.el9_4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-docs-0:1.26.5-1.el9_4.noarch",
"product": {
"name": "golang-docs-0:1.26.5-1.el9_4.noarch",
"product_id": "golang-docs-0:1.26.5-1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-docs@1.26.5-1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-misc-0:1.26.5-1.el9_4.noarch",
"product": {
"name": "golang-misc-0:1.26.5-1.el9_4.noarch",
"product_id": "golang-misc-0:1.26.5-1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-misc@1.26.5-1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-src-0:1.26.5-1.el9_4.noarch",
"product": {
"name": "golang-src-0:1.26.5-1.el9_4.noarch",
"product_id": "golang-src-0:1.26.5-1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-src@1.26.5-1.el9_4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-tests-0:1.26.5-1.el9_4.noarch",
"product": {
"name": "golang-tests-0:1.26.5-1.el9_4.noarch",
"product_id": "golang-tests-0:1.26.5-1.el9_4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-tests@1.26.5-1.el9_4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64"
},
"product_reference": "golang-0:1.26.5-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le"
},
"product_reference": "golang-0:1.26.5-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x"
},
"product_reference": "golang-0:1.26.5-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_4.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src"
},
"product_reference": "golang-0:1.26.5-1.el9_4.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64"
},
"product_reference": "golang-0:1.26.5-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-docs-0:1.26.5-1.el9_4.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch"
},
"product_reference": "golang-docs-0:1.26.5-1.el9_4.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-misc-0:1.26.5-1.el9_4.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch"
},
"product_reference": "golang-misc-0:1.26.5-1.el9_4.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_4.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le"
},
"product_reference": "golang-race-0:1.26.5-1.el9_4.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x"
},
"product_reference": "golang-race-0:1.26.5-1.el9_4.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_4.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-src-0:1.26.5-1.el9_4.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch"
},
"product_reference": "golang-src-0:1.26.5-1.el9_4.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-tests-0:1.26.5-1.el9_4.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
},
"product_reference": "golang-tests-0:1.26.5-1.el9_4.noarch",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39817",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-07T20:01:43.510043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \"go tool pack\" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the \"pack\" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "RHBZ#2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://go.dev/cl/767520",
"url": "https://go.dev/cl/767520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78778",
"url": "https://go.dev/issue/78778"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4979",
"url": "https://pkg.go.dev/vuln/GO-2026-4979"
}
],
"release_date": "2026-05-07T19:41:18.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction"
},
{
"cve": "CVE-2026-39819",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-05-07T20:01:04.403877+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \u0027go bug\u0027 command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system\u0027s temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the \u0027go bug\u0027 command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39819"
},
{
"category": "external",
"summary": "RHBZ#2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"category": "external",
"summary": "https://go.dev/cl/763882",
"url": "https://go.dev/cl/763882"
},
{
"category": "external",
"summary": "https://go.dev/issue/78584",
"url": "https://go.dev/issue/78584"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4978",
"url": "https://pkg.go.dev/vuln/GO-2026-4978"
}
],
"release_date": "2026-05-07T19:41:18.849000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-08T17:01:53.592869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39822"
},
{
"category": "external",
"summary": "RHBZ#2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
},
{
"category": "external",
"summary": "https://go.dev/cl/797880",
"url": "https://go.dev/cl/797880"
},
{
"category": "external",
"summary": "https://go.dev/issue/79005",
"url": "https://go.dev/issue/79005"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
"url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4970",
"url": "https://pkg.go.dev/vuln/GO-2026-4970"
}
],
"release_date": "2026-07-08T15:46:27.199000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-39825",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-05-07T20:01:37.714133+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s net/http/httputil package where ReverseProxy can forward query parameters that are hidden from Rewrite or Director functions. This occurs when the number of query parameters exceeds the url.ParseQuery limit (controlled by the GODEBUG setting urlmaxqueryparams). While Red Hat ships Go-based components across many products, exploitation requires that an application use ReverseProxy with a Rewrite or Director function that relies on query parameter inspection for security enforcement, which limits the practical impact of this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "RHBZ#2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://go.dev/cl/770541",
"url": "https://go.dev/cl/770541"
},
{
"category": "external",
"summary": "https://go.dev/issue/78948",
"url": "https://go.dev/issue/78948"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4976",
"url": "https://pkg.go.dev/vuln/GO-2026-4976"
}
],
"release_date": "2026-05-07T19:41:18.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Increase the maximum number of query parameters allowed by setting the GODEBUG environment variable `urlmaxqueryparams` to a higher value (e.g., `GODEBUG=urlmaxqueryparams=20000`), or validate and enforce security controls on query parameters at the backend service rather than relying solely on the ReverseProxy\u0027s Rewrite or Director function for security filtering.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
},
{
"cve": "CVE-2026-39826",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-07T20:01:46.305827+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only \u0027type\u0027 attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "RHBZ#2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://go.dev/cl/771180",
"url": "https://go.dev/cl/771180"
},
{
"category": "external",
"summary": "https://go.dev/issue/78981",
"url": "https://go.dev/issue/78981"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4980",
"url": "https://pkg.go.dev/vuln/GO-2026-4980"
}
],
"release_date": "2026-05-07T19:41:19.138000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42501",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-07T20:00:54.811489+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in the Go command (`cmd/go`) allows a malicious module proxy to bypass checksum validation, potentially leading to the execution of untrusted Go toolchains. Red Hat products utilizing the Go command are vulnerable if configured to use an untrusted module proxy or checksum database, as this could compromise the integrity of the Go development environment. Exploitation requires user interaction with a compromised proxy.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42501"
},
{
"category": "external",
"summary": "RHBZ#2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42501"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
},
{
"category": "external",
"summary": "https://go.dev/cl/775321",
"url": "https://go.dev/cl/775321"
},
{
"category": "external",
"summary": "https://go.dev/issue/79070",
"url": "https://go.dev/issue/79070"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4984",
"url": "https://pkg.go.dev/vuln/GO-2026-4984"
}
],
"release_date": "2026-05-07T19:41:19.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "To verify the integrity of Go module dependencies and detect potential tampering by a malicious proxy, users can revalidate all dependencies of the current module. This process involves removing the existing `go.sum` file and then re-generating and verifying module checksums.\n\nExecute the following commands in your module\u0027s root directory:\n```bash\nrm go.sum\ngo mod tidy\ngo mod verify\n```\nThis operation will re-download and re-verify all module dependencies. Be aware that this may affect your local module cache and could require re-building projects.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T18:54:33+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:go-toolset-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.src",
"AppStream-9.4.0.Z.E4S:golang-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-bin-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-docs-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-misc-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.aarch64",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.ppc64le",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.s390x",
"AppStream-9.4.0.Z.E4S:golang-race-0:1.26.5-1.el9_4.x86_64",
"AppStream-9.4.0.Z.E4S:golang-src-0:1.26.5-1.el9_4.noarch",
"AppStream-9.4.0.Z.E4S:golang-tests-0:1.26.5-1.el9_4.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
}
]
}
RHSA-2026:59546
Vulnerability from csaf_redhat - Published: 2026-08-25 17:52 - Updated: 2026-08-28 08:15Summary
Red Hat Security Advisory: ignition security update
Severity
Important
Notes
Topic: An update for ignition is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration.
Security Fix(es):
* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for ignition is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration.\n\nSecurity Fix(es):\n\n* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:59546",
"url": "https://access.redhat.com/errata/RHSA-2026:59546"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59546.json"
}
],
"title": "Red Hat Security Advisory: ignition security update",
"tracking": {
"current_release_date": "2026-08-28T08:15:23+00:00",
"generator": {
"date": "2026-08-28T08:15:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:59546",
"initial_release_date": "2026-08-25T17:52:01+00:00",
"revision_history": [
{
"date": "2026-08-25T17:52:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-25T17:52:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-28T08:15:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "ignition-0:2.21.0-2.el10_0.3.src",
"product": {
"name": "ignition-0:2.21.0-2.el10_0.3.src",
"product_id": "ignition-0:2.21.0-2.el10_0.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.21.0-2.el10_0.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ignition-0:2.21.0-2.el10_0.3.aarch64",
"product": {
"name": "ignition-0:2.21.0-2.el10_0.3.aarch64",
"product_id": "ignition-0:2.21.0-2.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.21.0-2.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"product": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"product_id": "ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-edge@2.21.0-2.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"product": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"product_id": "ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.21.0-2.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"product": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"product_id": "ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.21.0-2.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"product": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"product_id": "ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.21.0-2.el10_0.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"product": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"product_id": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.21.0-2.el10_0.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ignition-0:2.21.0-2.el10_0.3.ppc64le",
"product": {
"name": "ignition-0:2.21.0-2.el10_0.3.ppc64le",
"product_id": "ignition-0:2.21.0-2.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.21.0-2.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"product": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"product_id": "ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-edge@2.21.0-2.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"product": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"product_id": "ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.21.0-2.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"product": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"product_id": "ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.21.0-2.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"product": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"product_id": "ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.21.0-2.el10_0.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"product": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"product_id": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.21.0-2.el10_0.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ignition-0:2.21.0-2.el10_0.3.s390x",
"product": {
"name": "ignition-0:2.21.0-2.el10_0.3.s390x",
"product_id": "ignition-0:2.21.0-2.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.21.0-2.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"product": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"product_id": "ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-edge@2.21.0-2.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"product": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"product_id": "ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.21.0-2.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"product": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"product_id": "ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.21.0-2.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"product": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"product_id": "ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.21.0-2.el10_0.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"product": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"product_id": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.21.0-2.el10_0.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ignition-0:2.21.0-2.el10_0.3.x86_64",
"product": {
"name": "ignition-0:2.21.0-2.el10_0.3.x86_64",
"product_id": "ignition-0:2.21.0-2.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition@2.21.0-2.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"product": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"product_id": "ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-edge@2.21.0-2.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"product": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"product_id": "ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate@2.21.0-2.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"product": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"product_id": "ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debugsource@2.21.0-2.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"product": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"product_id": "ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-debuginfo@2.21.0-2.el10_0.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"product": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"product_id": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ignition-validate-debuginfo@2.21.0-2.el10_0.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.21.0-2.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64"
},
"product_reference": "ignition-0:2.21.0-2.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.21.0-2.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le"
},
"product_reference": "ignition-0:2.21.0-2.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.21.0-2.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x"
},
"product_reference": "ignition-0:2.21.0-2.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.21.0-2.el10_0.3.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src"
},
"product_reference": "ignition-0:2.21.0-2.el10_0.3.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-0:2.21.0-2.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64"
},
"product_reference": "ignition-0:2.21.0-2.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64"
},
"product_reference": "ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le"
},
"product_reference": "ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x"
},
"product_reference": "ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
},
"product_reference": "ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64"
},
"product_reference": "ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le"
},
"product_reference": "ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x"
},
"product_reference": "ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64"
},
"product_reference": "ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64"
},
"product_reference": "ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le"
},
"product_reference": "ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x"
},
"product_reference": "ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-edge-0:2.21.0-2.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64"
},
"product_reference": "ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64"
},
"product_reference": "ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le"
},
"product_reference": "ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x"
},
"product_reference": "ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-0:2.21.0-2.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64"
},
"product_reference": "ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64"
},
"product_reference": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le"
},
"product_reference": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x"
},
"product_reference": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
},
"product_reference": "ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-25T17:52:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59546"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-25T17:52:01+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:59546"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.src",
"AppStream-10.0.Z.E2S:ignition-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debuginfo-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-debugsource-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-edge-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-0:2.21.0-2.el10_0.3.x86_64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.aarch64",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.ppc64le",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.s390x",
"AppStream-10.0.Z.E2S:ignition-validate-debuginfo-0:2.21.0-2.el10_0.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
}
]
}
RHSA-2026:7291
Vulnerability from csaf_redhat - Published: 2026-04-09 11:00 - Updated: 2026-08-29 08:39Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A path traversal vulnerability has been identified in the Go os package affecting the Root abstraction, where improper handling of trailing path separators could allow access to the parent directory of a configured root directory. By supplying a filename ending in "../", an attacker may be able to open the immediate parent directory of the intended Root. Although this escape does not allow traversal to higher-level ancestors or direct access to files within the parent directory, it may expose directory metadata or unintended filesystem structure if the application passes untrusted path input to Root.Open.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A CrossOriginProtection bypass has been discovered in the golang net/http package. When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[::1]/". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A memory exhaustion flaw has been discovered in the golang encoding/asn1 module. Within parseSequenceOf, reflect.MakeSlice is being used to pre-allocate a slice that is needed in order to fully validate the given DER payload. The size of the slice allocated are also multiple times larger than the input DER. As a result, a malicious actor can craft a big empty DER payload, resulting in an unnecessary large allocation of memories. This can be a way to cause memory exhaustion.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/net/http. A remote attacker could exploit this vulnerability by sending a large number of small cookies to an HTTP server. Despite a default 1MB limit on HTTP headers, the number of cookies parsed is unrestricted, leading to excessive memory allocation. This can cause the server to consume significant memory resources, resulting in a denial of service (DoS) for legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
A potential denial of service flaw has been discovered in golang's crypto/x509 module. Due to the design of the name constraint checking algorithm, the processing time of some inputs scales non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A denial of service vector has been discovered in the golang crypto/x509 module. An attacker could craft an intermediate X.509 certificate containing a DSA public key and can crash a remote host with an unauthenticated call to any endpoint that verifies the certificate chain.
CWE-617 - Reachable AssertionAffected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The crypto/tls conn.Handshake method returns an error on the server-side when ALPN negotation fails which can contain arbitrary attacker controlled information provided by the client-side of the connection which is not escaped. This affects programs which log these errors without any additional form of sanitization, and may allow injection of attacker controlled information into logs.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.
4.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A potential denial of service flaw has been discovered in the golang encoding/pem module. Due to the design of the PEM parsing function, the processing time for some inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs and may result in an unresponsive program should an attacker exploit it.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service vulnerability has been discovered in the golang net/mail module. The ParseAddress function constructed domain-literal address components through repeated string concatenation which when parsing large domain-literal components, could cause excessive CPU consumption.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the crypto/x509 package in the Go standard library. This vulnerability allows a certificate validation bypass via an excluded subdomain constraint in a certificated chain as it does not restrict the usage of wildcard SANs in the leaf certificate.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A TLS connection handling flaw has been discovered in the golang crypto/tls library. During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in cmd/go. An attacker can exploit this by building a malicious Go source file that uses the '#cgo pkg-config:' directive. This allows the attacker to write to an arbitrary file with partial control over its content, by providing a '--log-file' argument to the pkg-config command. This vulnerability can lead to arbitrary file write.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Go's 'cgo tool'. This vulnerability arises from a discrepancy in how Go and C/C++ comments are parsed, which allows for malicious code to be hidden within comments and then "smuggled" into the compiled `cgo` binary. An attacker could exploit this to embed and execute arbitrary code, potentially leading to significant system compromise.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Golang's cmd/go module. This vulnerability allows a local attacker to achieve local code execution by downloading and building modules with specially crafted malicious version strings. On systems with Mercurial (hg) installed, this can occur when downloading modules from non-standard sources due to how external Version Control System (VCS) commands are constructed. Additionally, on systems with Git installed, providing malicious version strings to the toolchain can enable an attacker to write to arbitrary files on the filesystem. This issue is triggered by explicitly supplying these malicious version strings.
6.7 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.
CWE-295 - Improper Certificate ValidationAffected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A path traversal flaw has been discovered in the golang `os` module. On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
A flaw was found in golang.org/x/net/http2. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/2 frames, which are data packets used in the HTTP/2 protocol. Due to a missing check for null values, processing these specific frames (types 0x0a through 0x0f) can cause the server to crash. This leads to a Denial of Service (DoS) condition, making the affected server unavailable to legitimate users.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
An input escaping flaw has been discovered in the golang html/template module. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value "refresh". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow "url=" by setting htmlmetacontenturlescape=0.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially leading to memory corruption.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data corruption, memory corruption or unexpected application behavior.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Go's `archive/tar` package. A remote attacker could exploit this vulnerability by providing a maliciously-crafted archive file. When the `tar.Reader` processes an archive containing a large number of sparse regions in the "old GNU sparse map" format, it can lead to unbounded memory allocation. This can result in a Denial of Service (DoS) condition, making the affected application unresponsive.
4.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `html/template` package. This vulnerability arises from improper tracking of context and brace depth within JavaScript (JS) template literals. A remote attacker could exploit these issues to cause content to be incorrectly or improperly escaped, leading to Cross-Site Scripting (XSS) vulnerabilities. This could allow an attacker to inject malicious scripts into web pages viewed by other users.
5.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/image/tiff. A remote attacker could exploit this vulnerability by providing a maliciously crafted Tagged Image File Format (TIFF) file. This could cause the image decoding process to attempt to allocate up to 4 gigabytes (GiB) of memory. The excessive resource consumption or an out-of-memory error would lead to a Denial of Service (DoS) condition.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:golang1-26-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
332 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:7291",
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27141",
"url": "https://access.redhat.com/security/cve/CVE-2026-27141"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58190",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47911",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-22873",
"url": "https://access.redhat.com/security/cve/CVE-2025-22873"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68119",
"url": "https://access.redhat.com/security/cve/CVE-2025-68119"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61732",
"url": "https://access.redhat.com/security/cve/CVE-2025-61732"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61731",
"url": "https://access.redhat.com/security/cve/CVE-2025-61731"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61725",
"url": "https://access.redhat.com/security/cve/CVE-2025-61725"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61724",
"url": "https://access.redhat.com/security/cve/CVE-2025-61724"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61723",
"url": "https://access.redhat.com/security/cve/CVE-2025-61723"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58186",
"url": "https://access.redhat.com/security/cve/CVE-2025-58186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58185",
"url": "https://access.redhat.com/security/cve/CVE-2025-58185"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58181",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47914",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47912",
"url": "https://access.redhat.com/security/cve/CVE-2025-47912"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-47910",
"url": "https://access.redhat.com/security/cve/CVE-2025-47910"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61730",
"url": "https://access.redhat.com/security/cve/CVE-2025-61730"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58189",
"url": "https://access.redhat.com/security/cve/CVE-2025-58189"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58187",
"url": "https://access.redhat.com/security/cve/CVE-2025-58187"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58188",
"url": "https://access.redhat.com/security/cve/CVE-2025-58188"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33809",
"url": "https://access.redhat.com/security/cve/CVE-2026-33809"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32289",
"url": "https://access.redhat.com/security/cve/CVE-2026-32289"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32288",
"url": "https://access.redhat.com/security/cve/CVE-2026-32288"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27144",
"url": "https://access.redhat.com/security/cve/CVE-2026-27144"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27143",
"url": "https://access.redhat.com/security/cve/CVE-2026-27143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61727",
"url": "https://access.redhat.com/security/cve/CVE-2025-61727"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27139",
"url": "https://access.redhat.com/security/cve/CVE-2026-27139"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27138",
"url": "https://access.redhat.com/security/cve/CVE-2026-27138"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27142",
"url": "https://access.redhat.com/security/cve/CVE-2026-27142"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7291.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-08-29T08:39:13+00:00",
"generator": {
"date": "2026-08-29T08:39:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:7291",
"initial_release_date": "2026-04-09T11:00:43+00:00",
"revision_history": [
{
"date": "2026-04-09T11:00:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-29T08:39:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@aarch64",
"product": {
"name": "golang1-26-main@aarch64",
"product_id": "golang1-26-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26@1.26.2-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@src",
"product": {
"name": "golang1-26-main@src",
"product_id": "golang1-26-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26@1.26.2-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@x86_64",
"product": {
"name": "golang1-26-main@x86_64",
"product_id": "golang1-26-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26@1.26.2-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "golang1-26-main@noarch",
"product": {
"name": "golang1-26-main@noarch",
"product_id": "golang1-26-main@noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang1.26-docs@1.26.2-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@aarch64"
},
"product_reference": "golang1-26-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@noarch as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@noarch"
},
"product_reference": "golang1-26-main@noarch",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@src"
},
"product_reference": "golang1-26-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang1-26-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:golang1-26-main@x86_64"
},
"product_reference": "golang1-26-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22873",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-02-05T00:01:17.475869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436992"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability has been identified in the Go os package affecting the Root abstraction, where improper handling of trailing path separators could allow access to the parent directory of a configured root directory. By supplying a filename ending in \"../\", an attacker may be able to open the immediate parent directory of the intended Root. Although this escape does not allow traversal to higher-level ancestors or direct access to files within the parent directory, it may expose directory metadata or unintended filesystem structure if the application passes untrusted path input to Root.Open.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "os: os: Information disclosure via path traversal using specially crafted filenames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security classified this issue as Moderate.\n\nThe flaw exists in a local filesystem abstraction within the Go standard library, it can also be exploited remotely in applications that accept attacker-controlled path input over a network and pass it to Root.Open without proper validation. The attack complexity is low, as exploitation requires only appending \"../\" to the supplied path. However, the impact is limited: the flaw permits opening only the immediate parent directory, not arbitrary filesystem locations or files contained within that directory. There is no direct impact on file integrity or application availability. These constraints limit the practical exposure of the issue while still represents a boundary bypass and may expose unintended filesystem metadata. The issue does not permit traversal beyond the parent directory, modification of files, or broader system compromise, thereby constraining its overall impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-22873"
},
{
"category": "external",
"summary": "RHBZ#2436992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436992"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-22873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-22873"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-22873",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22873"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2025/05/06/2",
"url": "http://www.openwall.com/lists/oss-security/2025/05/06/2"
},
{
"category": "external",
"summary": "https://go.dev/cl/670036",
"url": "https://go.dev/cl/670036"
},
{
"category": "external",
"summary": "https://go.dev/issue/73555",
"url": "https://go.dev/issue/73555"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ",
"url": "https://groups.google.com/g/golang-announce/c/UZoIkUT367A/m/5WDxKizJAQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4403",
"url": "https://pkg.go.dev/vuln/GO-2026-4403"
}
],
"release_date": "2026-02-04T23:05:24.803000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "os: os: Information disclosure via path traversal using specially crafted filenames"
},
{
"cve": "CVE-2025-47910",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"discovery_date": "2025-09-22T22:00:44.572202+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2397528"
}
],
"notes": [
{
"category": "description",
"text": "A CrossOriginProtection bypass has been discovered in the golang net/http package. When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: CrossOriginProtection bypass in net/http",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47910"
},
{
"category": "external",
"summary": "RHBZ#2397528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2397528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47910",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47910"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47910",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47910"
},
{
"category": "external",
"summary": "https://go.dev/cl/699275",
"url": "https://go.dev/cl/699275"
},
{
"category": "external",
"summary": "https://go.dev/issue/75054",
"url": "https://go.dev/issue/75054"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ",
"url": "https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-3955",
"url": "https://pkg.go.dev/vuln/GO-2025-3955"
}
],
"release_date": "2025-09-22T21:01:55.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http: CrossOriginProtection bypass in net/http"
},
{
"cve": "CVE-2025-47911",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-02-05T18:01:23.423406+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437109"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: The `golang.org/x/net/html` package, used across various Red Hat products, is vulnerable to a denial of service due to quadratic parsing complexity in its `html.Parse` function. An attacker providing specially crafted HTML content could exploit this flaw, leading to resource exhaustion and service unavailability in applications that process untrusted HTML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "RHBZ#2437109",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437109"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47911",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47911"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47911"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4440",
"url": "https://github.com/golang/vulndb/issues/4440"
},
{
"category": "external",
"summary": "https://go.dev/cl/709876",
"url": "https://go.dev/cl/709876"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4440",
"url": "https://pkg.go.dev/vuln/GO-2026-4440"
}
],
"release_date": "2026-02-05T17:48:44.562000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Quadratic parsing complexity in golang.org/x/net/html"
},
{
"cve": "CVE-2025-47912",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2025-10-29T23:01:06.642219+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407247"
}
],
"notes": [
{
"category": "description",
"text": "The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: \"http://[::1]/\". IPv4 addresses and hostnames must not appear within square brackets. Parse did not enforce this requirement.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Insufficient validation of bracketed IPv6 hostnames in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47912"
},
{
"category": "external",
"summary": "RHBZ#2407247",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407247"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47912",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47912"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47912",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47912"
},
{
"category": "external",
"summary": "https://go.dev/cl/709857",
"url": "https://go.dev/cl/709857"
},
{
"category": "external",
"summary": "https://go.dev/issue/75678",
"url": "https://go.dev/issue/75678"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4010",
"url": "https://pkg.go.dev/vuln/GO-2025-4010"
}
],
"release_date": "2025-10-29T22:10:13.435000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/url: Insufficient validation of bracketed IPv6 hostnames in net/url"
},
{
"cve": "CVE-2025-47914",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2025-11-19T21:01:06.202641+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2416000"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH Agent servers, does not properly validate the size of messages during new identity requests. A specially crafted malformed message can lead to an out-of-bounds read, causing the program to panic and resulting in a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-47914"
},
{
"category": "external",
"summary": "RHBZ#2416000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-47914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47914"
},
{
"category": "external",
"summary": "https://go.dev/cl/721960",
"url": "https://go.dev/cl/721960"
},
{
"category": "external",
"summary": "https://go.dev/issue/76364",
"url": "https://go.dev/issue/76364"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4135",
"url": "https://pkg.go.dev/vuln/GO-2025-4135"
}
],
"release_date": "2025-11-19T20:33:43.126000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages"
},
{
"cve": "CVE-2025-58181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-11-19T21:00:50.197590+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2415997"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. An attacker can exploit this vulnerability by sending specially crafted GSSAPI (Generic Security Service Application Program Interface) authentication requests to an SSH (Secure Shell) server. The server fails to validate the number of mechanisms specified in these requests, leading to unbounded memory consumption. This can result in a Denial of Service (DoS), making the SSH server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. SSH servers utilizing `golang.org/x/crypto/ssh` and configured to process GSSAPI authentication requests are susceptible to unbounded memory consumption. An attacker can exploit this by sending specially crafted GSSAPI authentication requests, potentially leading to a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58181"
},
{
"category": "external",
"summary": "RHBZ#2415997",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415997"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58181"
},
{
"category": "external",
"summary": "https://go.dev/cl/721961",
"url": "https://go.dev/cl/721961"
},
{
"category": "external",
"summary": "https://go.dev/issue/76363",
"url": "https://go.dev/issue/76363"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA",
"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4134",
"url": "https://pkg.go.dev/vuln/GO-2025-4134"
}
],
"release_date": "2025-11-19T20:33:42.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via unbounded memory consumption in GSSAPI authentication"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58185",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:25.877898+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407251"
}
],
"notes": [
{
"category": "description",
"text": "A memory exhaustion flaw has been discovered in the golang encoding/asn1 module. Within parseSequenceOf, reflect.MakeSlice is being used to pre-allocate a slice that is needed in order to fully validate the given DER payload. The size of the slice allocated are also multiple times larger than the input DER. As a result, a malicious actor can craft a big empty DER payload, resulting in an unnecessary large allocation of memories. This can be a way to cause memory exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58185"
},
{
"category": "external",
"summary": "RHBZ#2407251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58185",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58185"
},
{
"category": "external",
"summary": "https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd",
"url": "https://github.com/golang/go/commit/8709a41d5ef7321f486a1857f189c3fee20e8edd"
},
{
"category": "external",
"summary": "https://go.dev/cl/709856",
"url": "https://go.dev/cl/709856"
},
{
"category": "external",
"summary": "https://go.dev/issue/75671",
"url": "https://go.dev/issue/75671"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4011",
"url": "https://pkg.go.dev/vuln/GO-2025-4011"
}
],
"release_date": "2025-10-29T22:10:13.682000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1"
},
{
"cve": "CVE-2025-58186",
"discovery_date": "2025-10-29T23:01:22.260983+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407250"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/net/http. A remote attacker could exploit this vulnerability by sending a large number of small cookies to an HTTP server. Despite a default 1MB limit on HTTP headers, the number of cookies parsed is unrestricted, leading to excessive memory allocation. This can cause the server to consume significant memory resources, resulting in a denial of service (DoS) for legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service vulnerability exists in applications using `golang.org/net/http` where an attacker can cause excessive memory consumption by sending a large number of small cookies. While HTTP headers generally have a 1MB limit, the parsing of individual cookies does not, leading to potential resource exhaustion. This issue has a Low impact on Red Hat products due to typical deployment configurations and resource management practices.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58186"
},
{
"category": "external",
"summary": "RHBZ#2407250",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407250"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58186"
},
{
"category": "external",
"summary": "https://go.dev/cl/709855",
"url": "https://go.dev/cl/709855"
},
{
"category": "external",
"summary": "https://go.dev/issue/75672",
"url": "https://go.dev/issue/75672"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4012",
"url": "https://pkg.go.dev/vuln/GO-2025-4012"
}
],
"release_date": "2025-10-29T22:10:13.912000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http"
},
{
"cve": "CVE-2025-58187",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:54.130980+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407259"
}
],
"notes": [
{
"category": "description",
"text": "A potential denial of service flaw has been discovered in golang\u0027s crypto/x509 module. Due to the design of the name constraint checking algorithm, the processing time of some inputs scales non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Quadratic complexity when checking name constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58187"
},
{
"category": "external",
"summary": "RHBZ#2407259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407259"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58187"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58187",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58187"
},
{
"category": "external",
"summary": "https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4",
"url": "https://github.com/golang/go/commit/3fc4c79fdbb17b9b29ea9f8c29dd780df075d4c4"
},
{
"category": "external",
"summary": "https://go.dev/cl/709854",
"url": "https://go.dev/cl/709854"
},
{
"category": "external",
"summary": "https://go.dev/issue/75681",
"url": "https://go.dev/issue/75681"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4007",
"url": "https://pkg.go.dev/vuln/GO-2025-4007"
}
],
"release_date": "2025-10-29T22:10:12.624000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: Quadratic complexity when checking name constraints in crypto/x509"
},
{
"cve": "CVE-2025-58188",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2025-10-29T23:01:39.787633+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407255"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vector has been discovered in the golang crypto/x509 module. An attacker could craft an intermediate X.509 certificate containing a DSA public key and can crash a remote host with an unauthenticated call to any endpoint that verifies the certificate chain.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impacts are limited on Red Hat products as they do not affect the host systems.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58188"
},
{
"category": "external",
"summary": "RHBZ#2407255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58188"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58188",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58188"
}
],
"release_date": "2025-10-29T22:10:14.143000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509"
},
{
"cve": "CVE-2025-58189",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2025-10-29T23:01:57.740310+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407260"
}
],
"notes": [
{
"category": "description",
"text": "The crypto/tls conn.Handshake method returns an error on the server-side when ALPN negotation fails which can contain arbitrary attacker controlled information provided by the client-side of the connection which is not escaped. This affects programs which log these errors without any additional form of sanitization, and may allow injection of attacker controlled information into logs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58189"
},
{
"category": "external",
"summary": "RHBZ#2407260",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407260"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58189",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58189"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58189",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58189"
},
{
"category": "external",
"summary": "https://go.dev/cl/707776",
"url": "https://go.dev/cl/707776"
},
{
"category": "external",
"summary": "https://go.dev/issue/75652",
"url": "https://go.dev/issue/75652"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4008",
"url": "https://pkg.go.dev/vuln/GO-2025-4008"
}
],
"release_date": "2025-10-29T22:10:12.947000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information"
},
{
"cve": "CVE-2025-58190",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-02-05T18:01:26.511908+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437110"
}
],
"notes": [
{
"category": "description",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) in an exposed go application if an attacker provides specially crafted HTML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "RHBZ#2437110",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437110"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58190",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58190"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58190"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4441",
"url": "https://github.com/golang/vulndb/issues/4441"
},
{
"category": "external",
"summary": "https://go.dev/cl/709875",
"url": "https://go.dev/cl/709875"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
"url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4441",
"url": "https://pkg.go.dev/vuln/GO-2026-4441"
}
],
"release_date": "2026-02-05T17:48:44.693000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: Infinite parsing loop in golang.org/x/net"
},
{
"cve": "CVE-2025-61723",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:29.304260+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407252"
}
],
"notes": [
{
"category": "description",
"text": "A potential denial of service flaw has been discovered in the golang encoding/pem module. Due to the design of the PEM parsing function, the processing time for some\ninputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs and may result in an unresponsive program should an attacker exploit it.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61723"
},
{
"category": "external",
"summary": "RHBZ#2407252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61723",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61723"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61723",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61723"
},
{
"category": "external",
"summary": "https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b",
"url": "https://github.com/golang/go/commit/5ce8cd16f3859ec5ac4106ad8ec15d6236f4501b"
},
{
"category": "external",
"summary": "https://go.dev/cl/709858",
"url": "https://go.dev/cl/709858"
},
{
"category": "external",
"summary": "https://go.dev/issue/75676",
"url": "https://go.dev/issue/75676"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4009",
"url": "https://pkg.go.dev/vuln/GO-2025-4009"
}
],
"release_date": "2025-10-29T22:10:13.220000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem"
},
{
"cve": "CVE-2025-61724",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2025-10-29T23:01:47.202663+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407257"
}
],
"notes": [
{
"category": "description",
"text": "The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61724"
},
{
"category": "external",
"summary": "RHBZ#2407257",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407257"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61724",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61724"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61724",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61724"
},
{
"category": "external",
"summary": "https://go.dev/cl/709859",
"url": "https://go.dev/cl/709859"
},
{
"category": "external",
"summary": "https://go.dev/issue/75716",
"url": "https://go.dev/issue/75716"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4015",
"url": "https://pkg.go.dev/vuln/GO-2025-4015"
}
],
"release_date": "2025-10-29T22:10:14.609000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto"
},
{
"cve": "CVE-2025-61725",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:18.805163+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407249"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service vulnerability has been discovered in the golang net/mail module. The ParseAddress function constructed domain-literal address components through repeated string concatenation which when parsing large domain-literal components, could cause excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: Excessive CPU consumption in ParseAddress in net/mail",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61725"
},
{
"category": "external",
"summary": "RHBZ#2407249",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407249"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61725",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61725"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61725",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61725"
},
{
"category": "external",
"summary": "https://go.dev/cl/709860",
"url": "https://go.dev/cl/709860"
},
{
"category": "external",
"summary": "https://go.dev/issue/75680",
"url": "https://go.dev/issue/75680"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4006",
"url": "https://pkg.go.dev/vuln/GO-2025-4006"
}
],
"release_date": "2025-10-29T22:10:12.255000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/mail: Excessive CPU consumption in ParseAddress in net/mail"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61727",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2025-12-03T20:01:21.730501+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418677"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/x509 package in the Go standard library. This vulnerability allows a certificate validation bypass via an excluded subdomain constraint in a certificated chain as it does not restrict the usage of wildcard SANs in the leaf certificate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to obtain a leaf certificate with a wildcard SAN (e.g., *.example.com) and the legitimate certificate policy must contain an excluded DNS name constraint (e.g., to prevent issuance for test.example.com), allowing an application using the crypto/x509 package to validate the certificate when it should have been rejected and to be vulnerable to MITM (man-in-the-middle) attacks. Additionally, the attacker does not have full control of what data can be read of modified during the attack. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61727"
},
{
"category": "external",
"summary": "RHBZ#2418677",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418677"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61727",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61727"
},
{
"category": "external",
"summary": "https://go.dev/cl/723900",
"url": "https://go.dev/cl/723900"
},
{
"category": "external",
"summary": "https://go.dev/issue/76442",
"url": "https://go.dev/issue/76442"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4175",
"url": "https://pkg.go.dev/vuln/GO-2025-4175"
}
],
"release_date": "2025-12-03T19:37:15.054000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-61730",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-01-28T20:01:36.508659+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434430"
}
],
"notes": [
{
"category": "description",
"text": "A TLS connection handling flaw has been discovered in the golang crypto/tls library. During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The data leak after exploitation of this vulnerability is minor, data such as Handshake message contents that should have been processed only after switching to a stronger TLS 1.3 encryption level, Protocol state details such as which handshake message was processed when, Timing and ordering information about the TLS 1.3 state.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61730"
},
{
"category": "external",
"summary": "RHBZ#2434430",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434430"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61730",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61730"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61730",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61730"
}
],
"release_date": "2026-01-28T19:30:30.986000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls"
},
{
"cve": "CVE-2025-61731",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-01-28T20:01:45.587773+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in cmd/go. An attacker can exploit this by building a malicious Go source file that uses the \u0027#cgo pkg-config:\u0027 directive. This allows the attacker to write to an arbitrary file with partial control over its content, by providing a \u0027--log-file\u0027 argument to the pkg-config command. This vulnerability can lead to arbitrary file write.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is Important rather than Moderate because compiling a malicious Go source file can cause `pkg-config` to create or append data to files at attacker-chosen locations, subject to the permissions of the build user. This can enable unintended filesystem modifications during the build process, which can lead to broken builds, alter tool behavior, and poison caches or artifacts, even without direct code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61731"
},
{
"category": "external",
"summary": "RHBZ#2434433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61731",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61731"
},
{
"category": "external",
"summary": "https://go.dev/cl/736711",
"url": "https://go.dev/cl/736711"
},
{
"category": "external",
"summary": "https://go.dev/issue/77100",
"url": "https://go.dev/issue/77100"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4339",
"url": "https://pkg.go.dev/vuln/GO-2026-4339"
}
],
"release_date": "2026-01-28T19:30:30.844000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive"
},
{
"cve": "CVE-2025-61732",
"discovery_date": "2026-02-05T05:00:47.678207+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437016"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s \u0027cgo tool\u0027. This vulnerability arises from a discrepancy in how Go and C/C++ comments are parsed, which allows for malicious code to be hidden within comments and then \"smuggled\" into the compiled `cgo` binary. An attacker could exploit this to embed and execute arbitrary code, potentially leading to significant system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in the `cmd/cgo` component of the Go toolchain. A parsing discrepancy between Go and C/C++ comments could allow for code smuggling into the resulting `cgo` binary. This primarily affects systems where untrusted Go modules utilizing `cgo` are built, impacting Red Hat Enterprise Linux and OpenShift Container Platform.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61732"
},
{
"category": "external",
"summary": "RHBZ#2437016",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437016"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61732",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61732"
},
{
"category": "external",
"summary": "https://go.dev/cl/734220",
"url": "https://go.dev/cl/734220"
},
{
"category": "external",
"summary": "https://go.dev/issue/76697",
"url": "https://go.dev/issue/76697"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4433",
"url": "https://pkg.go.dev/vuln/GO-2026-4433"
}
],
"release_date": "2026-02-05T03:42:26.392000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy"
},
{
"cve": "CVE-2025-68119",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-01-28T20:01:57.098669+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434438"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Golang\u0027s cmd/go module. This vulnerability allows a local attacker to achieve local code execution by downloading and building modules with specially crafted malicious version strings. On systems with Mercurial (hg) installed, this can occur when downloading modules from non-standard sources due to how external Version Control System (VCS) commands are constructed. Additionally, on systems with Git installed, providing malicious version strings to the toolchain can enable an attacker to write to arbitrary files on the filesystem. This issue is triggered by explicitly supplying these malicious version strings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: cmd/go: Local code execution and arbitrary file write via malicious module version strings",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Moderate severity by Red Hat Product Security, because exploitation requires non-standard and intentional user behavior. \n\nThe attacker must explicitly supply a specially crafted module version string, which does not occur during normal Go module usage such as @latest or standard module paths, making the attack complexity high. \n\nAdditionally, user interaction is required, as the vulnerable behavior is only triggered when a user manually invokes the Go toolchain to download or build the malicious module.\n \nWhile successful exploitation can result in local code execution or arbitrary file modification, the combination of local access, manual input, and uncommon usage patterns significantly limits the likelihood of exploitation in typical environments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68119"
},
{
"category": "external",
"summary": "RHBZ#2434438",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434438"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68119",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68119"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68119",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68119"
},
{
"category": "external",
"summary": "https://go.dev/cl/736710",
"url": "https://go.dev/cl/736710"
},
{
"category": "external",
"summary": "https://go.dev/issue/77099",
"url": "https://go.dev/issue/77099"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4338",
"url": "https://pkg.go.dev/vuln/GO-2026-4338"
}
],
"release_date": "2026-01-28T19:30:30.704000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: cmd/go: Local code execution and arbitrary file write via malicious module version strings"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27138",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:35.939008+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445344"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Panic in name constraint checking for malformed certificates in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27138"
},
{
"category": "external",
"summary": "RHBZ#2445344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27138",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27138"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27138",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27138"
},
{
"category": "external",
"summary": "https://go.dev/cl/752183",
"url": "https://go.dev/cl/752183"
},
{
"category": "external",
"summary": "https://go.dev/issue/77953",
"url": "https://go.dev/issue/77953"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4600",
"url": "https://pkg.go.dev/vuln/GO-2026-4600"
}
],
"release_date": "2026-03-06T21:28:14+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "crypto/x509: Panic in name constraint checking for malformed certificates in crypto/x509"
},
{
"cve": "CVE-2026-27139",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-06T22:01:08.670782+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445335"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal flaw has been discovered in the golang `os` module. On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the filesystem without permitting reading or writing files outside the root.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "os: FileInfo can escape from a Root in golang os module",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27139"
},
{
"category": "external",
"summary": "RHBZ#2445335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27139",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27139"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27139",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27139"
},
{
"category": "external",
"summary": "https://go.dev/cl/749480",
"url": "https://go.dev/cl/749480"
},
{
"category": "external",
"summary": "https://go.dev/issue/77827",
"url": "https://go.dev/issue/77827"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4602",
"url": "https://pkg.go.dev/vuln/GO-2026-4602"
}
],
"release_date": "2026-03-06T21:28:14.451000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "os: FileInfo can escape from a Root in golang os module"
},
{
"cve": "CVE-2026-27141",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-02-26T20:09:11.626155+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443104"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/http2. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/2 frames, which are data packets used in the HTTP/2 protocol. Due to a missing check for null values, processing these specific frames (types 0x0a through 0x0f) can cause the server to crash. This leads to a Denial of Service (DoS) condition, making the affected server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/http2: golang.org/x/net/http2: Denial of Service due to malformed HTTP/2 frames",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27141"
},
{
"category": "external",
"summary": "RHBZ#2443104",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443104"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27141"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27141",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27141"
},
{
"category": "external",
"summary": "https://go.dev/cl/746180",
"url": "https://go.dev/cl/746180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77652",
"url": "https://go.dev/issue/77652"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4559",
"url": "https://pkg.go.dev/vuln/GO-2026-4559"
}
],
"release_date": "2026-02-26T18:50:31.830000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/http2: golang.org/x/net/http2: Denial of Service due to malformed HTTP/2 frames"
},
{
"cve": "CVE-2026-27142",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-03-06T22:01:56.662646+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445351"
}
],
"notes": [
{
"category": "description",
"text": "An input escaping flaw has been discovered in the golang html/template module. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attribute with the value \"refresh\". A new GODEBUG setting has been added, htmlmetacontenturlescape, which can be used to disable escaping URLs in actions in the meta content attribute which follow \"url=\" by setting htmlmetacontenturlescape=0.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: URLs in meta content attribute actions are not escaped in html/template",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27142"
},
{
"category": "external",
"summary": "RHBZ#2445351",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445351"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27142",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27142"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142"
},
{
"category": "external",
"summary": "https://go.dev/cl/752081",
"url": "https://go.dev/cl/752081"
},
{
"category": "external",
"summary": "https://go.dev/issue/77954",
"url": "https://go.dev/issue/77954"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4603",
"url": "https://pkg.go.dev/vuln/GO-2026-4603"
}
],
"release_date": "2026-03-06T21:28:14.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: URLs in meta content attribute actions are not escaped in html/template"
},
{
"cve": "CVE-2026-27143",
"cwe": {
"id": "CWE-733",
"name": "Compiler Optimization Removal or Modification of Security-critical Code"
},
"discovery_date": "2026-04-08T02:01:29.491546+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456342"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cmd/compile package in the Go standard library. The compiler fails to correctly check for integer overflow or underflow in arithmetic operations involving loop induction variables. As a result, the compiler allows invalid memory indexing to occur at runtime, potentially leading to memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: cmd/compile: possible memory corruption after bound check elimination",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is only exploitable in applications that contain a loop structure that relies on an induction variable. An induction variable is a variable that gets modified, usually incremented or decremented, by a predictable amount on each iteration. Inside the loop, the induction variable must be directly used as the index to access or modify elements within an array or a slice. Additionally, an attacker must be able to cause an integer overflow or underflow in the induction variable to trigger this issue. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27143"
},
{
"category": "external",
"summary": "RHBZ#2456342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27143"
},
{
"category": "external",
"summary": "https://go.dev/cl/763765",
"url": "https://go.dev/cl/763765"
},
{
"category": "external",
"summary": "https://go.dev/issue/78333",
"url": "https://go.dev/issue/78333"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4868",
"url": "https://pkg.go.dev/vuln/GO-2026-4868"
}
],
"release_date": "2026-04-08T01:06:57.168000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, strictly sanitize and enforce bounds checking on any untrusted user input that influences loop counters, iteration limits, or memory indices. If there is no integer overflow or underflow, the out-of-bounds access cannot occur.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: cmd/compile: possible memory corruption after bound check elimination"
},
{
"cve": "CVE-2026-27144",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"discovery_date": "2026-04-08T02:01:22.896153+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456340"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data corruption, memory corruption or unexpected application behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: cmd/compile: no-op interface conversion bypasses overlap checking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable in applications that contain a memory move or copy operation that is subject to a no-op (no-operation) interface conversion. Furthermore, the source and destination memory addresses involved in the move or copy must overlap and an attacker must be able to supply an input that triggers this specific operation. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27144"
},
{
"category": "external",
"summary": "RHBZ#2456340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27144",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27144"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27144",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27144"
},
{
"category": "external",
"summary": "https://go.dev/cl/763764",
"url": "https://go.dev/cl/763764"
},
{
"category": "external",
"summary": "https://go.dev/issue/78371",
"url": "https://go.dev/issue/78371"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4867",
"url": "https://pkg.go.dev/vuln/GO-2026-4867"
}
],
"release_date": "2026-04-08T01:06:56.908000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "To mitigate this issue, review code that performs memory copies or struct assignments. If data is being passed through an interface (such as \u0027any\u0027 or \u0027interface{}\u0027) just before a move operation, refactor the code to use concrete types or explicit pointers instead.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: cmd/compile: no-op interface conversion bypasses overlap checking"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-32288",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:00:57.624222+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `archive/tar` package. A remote attacker could exploit this vulnerability by providing a maliciously-crafted archive file. When the `tar.Reader` processes an archive containing a large number of sparse regions in the \"old GNU sparse map\" format, it can lead to unbounded memory allocation. This can result in a Denial of Service (DoS) condition, making the affected application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "archive/tar: golang: Go\u0027s archive/tar package: Denial of Service via maliciously-crafted archive",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32288"
},
{
"category": "external",
"summary": "RHBZ#2456332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32288"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32288",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32288"
},
{
"category": "external",
"summary": "https://go.dev/cl/763766",
"url": "https://go.dev/cl/763766"
},
{
"category": "external",
"summary": "https://go.dev/issue/78301",
"url": "https://go.dev/issue/78301"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4869",
"url": "https://pkg.go.dev/vuln/GO-2026-4869"
}
],
"release_date": "2026-04-08T01:06:57.416000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "archive/tar: golang: Go\u0027s archive/tar package: Denial of Service via maliciously-crafted archive"
},
{
"cve": "CVE-2026-32289",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-04-08T02:01:05.911683+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package. This vulnerability arises from improper tracking of context and brace depth within JavaScript (JS) template literals. A remote attacker could exploit these issues to cause content to be incorrectly or improperly escaped, leading to Cross-Site Scripting (XSS) vulnerabilities. This could allow an attacker to inject malicious scripts into web pages viewed by other users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32289"
},
{
"category": "external",
"summary": "RHBZ#2456334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32289"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32289"
},
{
"category": "external",
"summary": "https://go.dev/cl/763762",
"url": "https://go.dev/cl/763762"
},
{
"category": "external",
"summary": "https://go.dev/issue/78331",
"url": "https://go.dev/issue/78331"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4865",
"url": "https://pkg.go.dev/vuln/GO-2026-4865"
}
],
"release_date": "2026-04-08T01:06:56.297000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals"
},
{
"cve": "CVE-2026-33809",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-25T19:01:55.384019+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/image/tiff. A remote attacker could exploit this vulnerability by providing a maliciously crafted Tagged Image File Format (TIFF) file. This could cause the image decoding process to attempt to allocate up to 4 gigabytes (GiB) of memory. The excessive resource consumption or an out-of-memory error would lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33809"
},
{
"category": "external",
"summary": "RHBZ#2451437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33809",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33809"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33809",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33809"
},
{
"category": "external",
"summary": "https://go.dev/cl/757660",
"url": "https://go.dev/cl/757660"
},
{
"category": "external",
"summary": "https://go.dev/issue/78267",
"url": "https://go.dev/issue/78267"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4815",
"url": "https://pkg.go.dev/vuln/GO-2026-4815"
}
],
"release_date": "2026-03-25T18:24:04.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via maliciously crafted TIFF file"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T11:00:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:7291"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:golang1-26-main@aarch64",
"Red Hat Hardened Images:golang1-26-main@noarch",
"Red Hat Hardened Images:golang1-26-main@src",
"Red Hat Hardened Images:golang1-26-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…